4 matches found
CVE-2025-10809: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. The affected element is an unknown function of the file /admin/department.php. Such manipulation of the argument d leads to sql injection. The attack can be executed remotely. The exploit has been...
PT-2023-30308
Name of the Vulnerable Software and Affected Versions TOTVS RM version 12.1 Description A problematic vulnerability was found in the Portal component of TOTVS RM, where the manipulation of the argument d leads to cross-site scripting. The attack can be launched remotely. The vendor was contacted...
CVE-2023-4710: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in TOTVS RM 12.1. Affected by this vulnerability is an unknown functionality of the component Portal. The manipulation of the argument d leads to cross site scripting. The attack can be launched remotely. The identifier VDB-238573 was assigned t...