315 matches found
CVE-2021-46061
An SQL Injection vulnerability exists in Sourcecodester Computer and Mobile Repair Shop Management system RSMS 1.0 via the code parameter in /rsms/ node app...
PT-2022-12540
Name of the Vulnerable Software and Affected Versions Sourcecodester Computer and Mobile Repair Shop Management system RSMS version 1.0 Description An SQL Injection issue exists in the system via the code parameter in the "/rsms/ node app" API endpoint. This allows for potential exploitation. No...
CVE-2021-46061: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability exists in Sourcecodester Computer and Mobile Repair Shop Management system RSMS 1.0 via the code parameter in /rsms/ node app...
Computer And Mobile Repair Shop Management 1.0 SQL Injection
Title: Computer and Mobile Repair Shop Management-1.0 SQL - Injections Author: nu11secur1ty Date: 12.28.2021 Vendor: https://www.sourcecodester.com/users/tips23 Software: https://www.sourcecodester.com/php/15108/computer-and-mobile-repair-shop-management-system-using-phpoop-free-source-code.html...
CVE-2020-19118
Cross Site Scripting XSS vulnerabiity in YzmCMS 5.2 via the sitecode parameter in admin/index/init.html...
PT-2021-17318
Name of the Vulnerable Software and Affected Versions: WoWonder version 3.0.4 Description: The issue allows remote attackers to take over any account due to a weak cryptographic algorithm in recover.php. The code parameter is easily predicted from the time of day. Recommendations: For WoWonder...
CVE-2020-27238
An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...
CVE-2020-27237
An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the The nomenclature parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this...
CVE-2020-27238
An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...
PT-2021-11334
Name of the Vulnerable Software and Affected Versions: OpenClinic GA version 5.173.3 Description: An exploitable SQL injection issue exists in the getAssets.jsp page. The code parameter in this page is vulnerable to unauthenticated SQL injection. An attacker can trigger this issue by making an...
CVE-2020-27238: Improper Neutralization of Special Elements used in an SQL Command
An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...
CVE-2021-27695
Multiple stored cross-site scripting XSS vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbitrary web script or HTML via any "Add" sections, such as Add Card Building & Floor, or others in the Name and Code Parameters...
CVE-2020-29143
A SQL injection vulnerability in interface/reports/nonreported.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the formcode parameter...
OpenEMR SQL注入漏洞
OpenEMR is a medical practice management software that also supports electronic medical records EMR. A SQL injection vulnerability exists in interface/reports/immunizationreport.php in OpenEMR versions prior to 5.0.2.5. A remote authenticated attacker can exploit this vulnerability to execute...
nopCommerce 跨站脚本漏洞
nopCommerce is an open source e-commerce shopping cart software. A reflective cross-site scripting vulnerability exists in the Discount Coupon component in nopCommerce 4.30. An attacker can exploit this vulnerability to inject arbitrary web script or HTML via the...
CVE-2020-27974
NeoPost Mail Accounting Software Pro 5.0.6 allows php/Commun/FUSSCMBlockStart.php?code= XSS...
PT-2020-16881
Name of the Vulnerable Software and Affected Versions NeoPost Mail Accounting Software Pro version 5.0.6 Description The issue allows for XSS in the php/Commun/FUS SCM BlockStart.php endpoint, specifically through the code parameter. Recommendations For NeoPost Mail Accounting Software Pro versio...
PT-2020-12630
Name of the Vulnerable Software and Affected Versions Deskpro versions prior to 2019.8.0 Description An issue was discovered in Deskpro that allows administrators to modify the helpdesk interface by editing /portal/api/style/edit-theme-set/template-sources theme templates, using TWIG as its...
Dolibarr Cross-Site Scripting Vulnerability (CNVD-2020-10498)
Dolibarr ERP/CRM is an open source software/freeware for small and medium-sized businesses, organizations or freelancers. It includes different features such as Enterprise Resource Planning ERP and Customer Relationship Management CRM, as well as applications for other different activities. A...
