CVE-2022-27414

CVE-2022-27414 - SQLインジェクション College Website CMS v1.0 - CVE-2022-27414 - SQLインジェクション CVE URL root@kitploit: https://vulners.com/cve/CVE-2022-27414 以下がPoC 脆弱なコード "cwms\departments\index.php"の9行目以降から始まる root@kitploit: query"SELECT FROM departmentlist where deleteflag = 0 and status = 1 order by nam...

EUVD-2022-31169

Malicious code in bioql PyPI...

CVE-2022-26615

A cross-site scripting XSS vulnerability in College Website Content Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User Profile Name text fields...

CVE-2022-26615

A cross-site scripting XSS vulnerability in College Website Content Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User Profile Name text fields...

Cross site scripting

A cross-site scripting XSS vulnerability in College Website Content Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User Profile Name text fields...

CVE-2022-26615

CVE-2022-26615 affects the College Website Content Management System v1.0. A stored/reflected XSS vulnerability exists in the User Profile Name field that allows attackers to inject arbitrary scripts/HTML, enabling client-side script execution. The connected sources confirm the impact but do not ...