CVE-2022-35585

A stored cross-site scripting XSS issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "startdate" Parameter...

CVE-2022-35590

A cross-site scripting XSS issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "enddate" Parameter...

ForkCMS 跨站脚本漏洞

ForkCMS is a software application. An easy-to-use open source CMS using Symfony components. A security vulnerability exists in ForkCMS version 5.9.3. A remote attacker can exploit this vulnerability to inject JavaScript via the "startdate" parameter...

ForkCMS 跨站脚本漏洞

ForkCMS is a software application. An easy-to-use open source CMS using Symfony components. A security vulnerability exists in ForkCMS version 5.9.3. A remote attacker can exploit this vulnerability to inject JavaScript via the "enddate" parameter...

CVE-2022-34951

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getsalereport.php...

CVE-2022-34953

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getOrderReport.php...

CVE-2022-31879

Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter...

CVE-2022-31879

Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter...

CVE-2022-31879

Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter...

Sql injection

Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter...

CVE-2022-31879

CVE-2022-31879 affects Online Fire Reporting System v1.0, with a confirmed SQL injection via the date parameter. Affects the application logic where user input is used in SQL queries, enabling potentially arbitrary queries and unauthorized data access or manipulation as described in multiple sour...

Online Fire Reporting System SQL注入漏洞

Online Fire Reporting System is an online fire reporting system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in version 1.0 of the Online Fire Reporting System due to a security issue with the date parameter in the node app, which can be exploited by an attacker...

PT-2022-20969 · Unknown · Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: Online Fire Reporting System version 1.0 Description: The issue concerns SQL Injection via the date parameter. This allows for potential manipulation of database queries, which could lead to unauthorized data access or modification...

CVE-2022-31879: Improper Neutralization of Special Elements used in an SQL Command

Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter...

Cross-site Scripting in Jenkins Date Parameter Plugin

Jenkins Date Parameter Plugin 0.0.4 and earlier does not escape the name and description of Date parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. Exploitation of this vulnerability...

GHSA-5HH2-F4H9-446G Cross-site Scripting in Jenkins Date Parameter Plugin

Jenkins Date Parameter Plugin 0.0.4 and earlier does not escape the name and description of Date parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. Exploitation of this vulnerability...

Jenkins Date Parameter Plugin Cross-Site Scripting Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site scripting vulnerability exist...

CVE-2022-34185

Jenkins Date Parameter Plugin 0.0.4 and earlier does not escape the name and description of Date parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34185

Jenkins Date Parameter Plugin 0.0.4 and earlier does not escape the name and description of Date parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34185

Jenkins Date Parameter Plugin 0.0.4 and earlier does not escape the name and description of Date parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...