442 matches found
CVE-2025-7558
A vulnerability was found in code-projects Voting System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/positionsadd.php. The manipulation of the argument description leads to sql injection. The attack may be launched remotely. The exploit...
Notice Board System manage-notices.php file cross-site scripting vulnerability
Notice Board System is a bulletin board system. Notice Board System has a cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the parameters Title/Description in the file /admin/manage-notices.php, which can be...
Complaint Management System /admin/edit-state.php File SQL Injection Vulnerability
Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter description in the /admin/edit-state.php file. An attacker can explo...
iSoluçõesWEB SoluçõesCoop 代码注入漏洞
iSoluçõesWEB SoluçõesCoop is a management system for iSoluçõesWEB in Brazil. A code injection vulnerability exists in iSoluçõesWEB SoluçõesCoop 20250519 and earlier versions, which results from a cross-site scripting attack due to incorrect manipulation of the Descrição da solicitação parameter o...
PHPGurukul Complaint Management System 注入漏洞
Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter description in the /admin/edit-category.php file. An attacker can...
pixelimity 注入漏洞
pixelimity is pixelimity open source a content management system . pixelimity 1.0 version of an injection vulnerability , the vulnerability stems from the file /install/index.php parameter sitedescription in the wrong operation leads to SQL injection...
CVE-2024-40473
A Stored Cross Site Scripting XSS vulnerability was found in "managehouses.php" in SourceCodester Best House Rental Management System v1.0. It allows remote attackers to execute arbitrary code via "Houseno" and "Description" parameter fields...
CVE-2024-32745
A cross-site scripting XSS vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the PAGE DESCRIPTION parameter under the CURRENT PAGE module...
CVE-2023-1593
A vulnerability, which was classified as problematic, has been found in SourceCodester Automatic Question Paper Generator System 1.0. This issue affects some unknown processing of the file classes/Master.php?f=saveclass. The manipulation of the argument description leads to cross site scripting...
CVE-2022-34561
A cross-site scripting XSS vulnerability in PHPFox v4.8.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the video description parameter...
CVE-2022-22850
A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodtester Hospital's Patient Records Management System 1.0 via the description parameter in roomtypes...
CVE-2020-23052
Catalyst IT Ltd Mahara CMS v19.10.2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component groupfiles.php via the Number Nombre and Description Descripción parameters...
CVE-2019-17491
Jiangnan Online Judge aka jnoj 0.8.0 has XSS via the Problemdescription parameter to web/admin/problem/create or web/polygon/problem/update...
CVE-2018-20601
UCMS 1.4.7 has XSS via the description parameter in an index.php listeditpost action...
Intelbras RF 301K 代码注入漏洞
The Intelbras RF 301K is a wireless router from Intelbras Brazil. A code injection vulnerability exists in the Intelbras RF 301K version 1.1.5, which stems from the Add Static IP component mishandling the parameter Description, which could lead to a cross-site scripting attack...
Hexo 安全漏洞
Hexo is a fast, simple and powerful blogging framework by Tommy Chen, a personal developer in China. A security vulnerability exists in Hexo version 4.3.0, which stems from the improper handling of the parameter Description in the file /admin/home/index.html, which could lead to a cross-site...
CVE-2024-53569: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in the New Goal Creation section of Volmarg Personal Management System v1.4.65 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the description parameter...
Demtec Graphytics 代码注入漏洞
Demtec Graphytics is an application from Demtec Corporation. A code injection vulnerability exists in Demtec Graphytics version 5.0.7 that stems from improper handling of the description parameter in the /visualization file, which could lead to a cross-site scripting attack...
Castlenet CBW383G2N 代码注入漏洞
The Castlenet CBW383G2N is a hardware device from Castlenet, Inc. A code injection vulnerability exists in Castlenet CBW383G2N 20250301 and earlier versions, which stems from the fact that incorrect manipulation of the parameter Description can lead to cross-site scripting attacks...
