PT-2024-13966

Name of the Vulnerable Software and Affected Versions Online Notice Board System version 1.0 Description The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the dd parameter of the "user/update profile.php" resource does not validate the characters received, a...

CVE-2023-50753: Improper Neutralization of Special Elements used in an SQL Command

Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the user/updateprofile.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-50743: Improper Neutralization of Special Elements used in an SQL Command

Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the registration.php resource does not validate the characters received and they are sent unfiltered to the database...

Online Notice Board System SQL Injection Vulnerability

Online Notice Board System is an online bulletin board system. A SQL injection vulnerability exists in Online Notice Board System v1.0, which occurs when the dd parameter of the registration.php page is processed without filtering and sent to the database for processing...

CVE-2007-5027: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in cgi-bin/ddns in the web management panel for the WBR3404TX broadband router with firmware R1.94p0vTIG allow remote attackers to inject arbitrary web script or HTML via the 1 DD or 2 DU parameter...