7159 matches found
CVE-2025-2072
FAST LTA Silent Brick WebUI is affected by a Reflected Cross-Site Scripting (XSS) vulnerability. The issue occurs when user-supplied input is reflected in output without proper sanitization or encoding, enabling arbitrary JavaScript execution in the victim’s browser. Affected WebUI parameters inc...
Exploit for CVE-2024-25600
CVE-2024-25600 Exploit - WordPress Bricks Builder Remote Code...
PT-2025-13770
Name of the Vulnerable Software and Affected Versions Infusionsoft Web Form JavaScript versions n/a through 1.1.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attack...
PT-2025-13660
Name of the Vulnerable Software and Affected Versions JetBlocks For Elementor versions 1.3.16 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...
CVE-2025-2901
Rejected reason: This vulnerability is redundant to CVE-2025-23366 and CVE-2024-10234...
CVE-2025-2901
CVE-2025-2901 is rejected/not used and does not represent an active vulnerability entry.
Bank Locker Management System edit-locker.php?ltid=6 File SQL Injection Vulnerability
Bank Locker Management System is a bank locker management system. Bank Locker Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the lockersize parameter of the edit-locker.php?ltid=6 file. An attacker c...
PT-2025-13530 · Red Hat · Jboss Eap Management Console
Name of the Vulnerable Software and Affected Versions: JBoss EAP Management Console affected versions not specified Description: A stored Cross-site scripting issue occurs when the application fails to properly sanitize user input before storing it, allowing malicious scripts to execute in the...
PT-2025-13533
Name of the Vulnerable Software and Affected Versions Já-Já Pagamentos for WooCommerce versions 1.3.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...
Bank Locker Management System search-report-details.php File SQL Injection Vulnerability
Bank Locker Management System is a bank locker management system. Bank Locker Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the searchinput parameter of the search-report-details.php file. An attacker ca...
Code-Projects Payroll Management System 注入漏洞
Payroll Management System is a payroll management system. A SQL injection vulnerability exists in Payroll Management System version 1.0 due to a lack of validation of externally entered SQL statements in the parameter emptype. An attacker can exploit this vulnerability to execute illegal SQL...
Art Gallery Management System search.php File SQL Injection Vulnerability
Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Search of /search.php. An attacker can exploit this...
Art Gallery Management System edit-art-type-detail.php File SQL Injection Vulnerability
Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability, which originates from the lack of validation of external input SQL statements for the parameter arttype in /admin/edit-art-type-detail.php?editid=1. An...
Art Gallery Management System edit-art-product-detail.php file SQL Injection Vulnerability
Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter editide/sprice/description of...
Art Gallery Management System edit-artist-detail.php File SQL Injection Vulnerability
Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Name of /admin/edit-artist-detail.php?editid=1. An attacker...
Zoo Management System login.php File SQL Injection Vulnerability
Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the parameter Username in /admin/login.php that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute...
Bank Locker Management System search-locker-details.php File SQL Injection Vulnerability
Bank Locker Management System is a bank locker management system. Bank Locker Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the searchinput parameter of /search-locker-details.php. An attacker can exploi...
Art Gallery Management System admin-profile.php File SQL Injection Vulnerability
Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter contactnumber of /admin/admin-profile.php. An attacker can...