CVE-2021-41675

Summary: CVE-2021-41675 is a Remote Code Execution in Sourcecodester E-Negosyo System 1.0. The flaw exists in the admin/produts/controller.php doInsert function, where image validation is performed via getImageSizei. Public sources across multiple feeds corroborate an RCE condition, but the exact...

CVE-2021-41674

An SQL Injection vulnerability exists in Sourcecodester E-Negosyo System 1.0 via the useremail parameter in /admin/login.php...

CVE-2021-41674

CVE-2021-41674 describes an SQL Injection in Sourcecodester E-Negosyo System 1.0 exploitable via the user_email parameter in /admin/login.php. Public sources in the connected documents confirm an SQL injection vulnerability with remote access characteristics (attack vector NETWORK) and no require...

Sourcecodester E-Negosyo System 代码问题漏洞

Sourcecodester E-Negosyo System is an open source online ordering system with SMS notifications. sourcecodester E-Negosyo System is vulnerable to remote code execution, which can be exploited by attackers to execute arbitrary code via the "/admin/produts/controller. php" in the doInsert function...

Shopware Cross-Site Scripting Vulnerability (CNVD-2021-103572)

Shopware is a suite of open source e-commerce software from the German company Shopware.Shopware in versions prior to 5.7.6 suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the...

elearning.marcoaurelio.comune.roma.it Cross Site Scripting vulnerability OBB-2210825

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

e-learning.outsphera.it Cross Site Scripting vulnerability OBB-2210815

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

NewStart CGSL CORE 5.05 / MAIN 5.05 : dovecot Multiple Vulnerabilities (NS-SA-2021-0166)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has dovecot packages installed that are affected by multiple vulnerabilities: - In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource...

CVE-2021-41188

Shopware is open source e-commerce software. Versions prior to 5.7.6 contain a cross-site scripting vulnerability. This issue is patched in version 5.7.6. Two workarounds are available. Using the security plugin or adding a particular following config to the .htaccess file will protect against...

CVE-2021-41188

CVE-2021-41188 affects Shopware Open Source before version 5.7.6, which contains a cross-site scripting vulnerability. The issue is mitigated by upgrading to 5.7.6; workarounds include enabling the Security Plugin or applying specific configurations in .htaccess (for Apache) or nginx server block...

Mult-e-Cart Ultimate 2.4 SQL Injection

Document Title: =============== Mult-e-Cart Ultimate v2.4 - SQL Injection Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2306 Release Date: ============= 2021-10-22 Vulnerability Laboratory ID VL-ID: ====================================...

e-pao.net Cross Site Scripting vulnerability OBB-2203746

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

e-w-e.ru Improper Access Control vulnerability OBB-2203272

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

e-santiye.com Improper Access Control vulnerability OBB-2195307

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

e-zaim.ru Improper Access Control vulnerability OBB-2195308

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

e-guichet-cartegrise.fr Improper Access Control vulnerability OBB-2194601

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Libmobi Out-of-Bounds Read Vulnerability

Libmobi is a C library . Used to handle Mobipocket/Kindle MOBI e-book format documents. An out-of-bounds read vulnerability exists in Libmobi, which stems from the program being vulnerable to the use of out-of-range pointer offsets, and can be exploited by an attacker to read memory information...

libmobi buffer overflow vulnerability (CNVD-2022-18219)

Libmobi is a C library . Used to handle Mobipocket/Kindle MOBI e-book format documents. A buffer overflow vulnerability exists in Libmobi, which stems from the fact that libmobi is susceptible to out-of-range pointer offsets, which can be exploited by an attacker to read memory information beyond...

CVE-2021-28496

On systems running Arista EOS and CloudEOS with the affected release version, when using shared secret profiles the password configured for use by BiDirectional Forwarding Detection BFD will be leaked when displaying output over eAPI or other JSON outputs to other authenticated users on the devic...

Oracle E-Business Suite Multiple Vulnerabilities (Oct 2021 CPU)

The version of Oracle E-Business Suite installed on the remote host is affected by multiple vulnerabilities as referenced in the October 2021 CPU advisory, including the following: - An easily exploitable vulnerability in the Oracle Content Manager product's Content Item Manager component that...