11752 matches found
OpenMRS openmrs-module-fhir2 安全漏洞
OpenMRS openmrs-module-fhir2 is an official OpenMRS module from OpenMRS, Inc. that provides support for the FHIR Fast Healthcare Interoperability Resources R4 standard, which enables OpenMRS to interoperate in a standardized way with other healthcare systems in a standardized manner. A security...
Tenda W18E 访问控制错误漏洞
Tenda W18E is a wireless router from Tenda China. A security vulnerability exists in the Tenda W18E version v.2.0 v.16.01.0.11, which originates from the Account Module Edit function and could lead to an attacker executing arbitrary code...
CVE-2025-5252
A vulnerability was found in PHPGurukul News Portal Project 4.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-subadmin.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has...
CVE-2025-5250
A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-category.php. The manipulation of the argument Category leads to sql injection. The attack may be launched remotely. The exploit...
CVE-2025-5250 PHPGurukul News Portal Project edit-category.php sql injection
A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-category.php. The manipulation of the argument Category leads to sql injection. The attack may be launched remotely. The exploit...
PHPGurukul News Portal Project 注入漏洞
News Portal Project is a news portal project. News Portal Project suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter emailid in the file /admin/edit-subadmin.php. An attacker can exploit this vulnerability t...
PHPGurukul News Portal Project 注入漏洞
News Portal Project is a news portal project. News Portal Project suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements for the parameter Category in the file /admin/edit-subcategory.php. An attacker can exploit this...
PHPGurukul News Portal Project 注入漏洞
News Portal Project is a news portal project. News Portal Project suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements for the parameter Category in the file /admin/edit-category.php. An attacker can exploit this vulnerability...
Chanjet CRM 注入漏洞
Chanjet CRM is a Customer Relationship Management system from China Changjitong Chanjet. An injection vulnerability exists in Chanjet CRM 20250510 and earlier versions, which originates from SQL injection due to incorrect operation of the parameter gblOrgID in the file...
Cross-site Scripting (XSS)
Overview DotNetNuke.Web is a provides references to core components such as Caching, Security and other security-related items for DNN Platform Affected versions of this package are vulnerable to Cross-site Scripting XSS via module actions when in edit mode. An attacker can execute scripts in the...
Cross-site Scripting (XSS)
Overview DotNetNuke.Core is a references provider to the DotNetNuke.dll to develop extensions for the DNN Platform. Affected versions of this package are vulnerable to Cross-site Scripting XSS via module actions when in edit mode. An attacker can execute scripts in the context of the user's brows...
GHSA-79M3-RVX2-3QQ9 Reflected Cross-Site Scripting (XSS) in module actions in edit mode
A specially crafted URL may be constructed which can inject an XSS payload that is triggered by using some module actions...
CVE-2025-48377 Dnn.Platform vulnerable to Reflected Cross-Site Scripting (XSS) in module actions in edit mode
DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 9.13.9, a specially crafted URL may be constructed which can inject an XSS payload that is triggered by using some module actions. Version 9.13.9 fixes the issue...
CVE-2024-51360
An issue in Hospital Management System In PHP V4.0 allows a remote attacker to execute arbitrary code via the hms/doctor/edit-profile.php file...
CVE-2025-5114 easysoft zentaopms Editor index.php edit deserialization
A vulnerability has been found in easysoft zentaopms 21.520250307 and classified as critical. This vulnerability affects the function Edit of the file /index.php?m=editor&f=edit&filePath=cGhhcjovLy9ldGMvcGFzc3dk&action=edit of the component Committer. The manipulation of the argument filePath lea...
CVE-2025-24703
Server-Side Request Forgery SSRF vulnerability in Ronald Huereca Comment Edit Core – Simple Comment Editing simple-comment-editing allows Server Side Request Forgery.This issue affects Comment Edit Core – Simple Comment Editing: from n/a through = 3.0.33...
CVE-2025-0800
A vulnerability classified as problematic has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file /pcci/admin/saveeditt.php of the component Edit Teacher. The manipulation of the argument fname leads to cross site scripting. It is possible to launch the...
CVE-2024-47536
Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. A user with the editmyprivateinfo right or who can otherwise change their name can XSS themselves by setting their "real name" to an XSS payload. This vulnerability is fixed in 2.31.0...
CVE-2024-46470
Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the membershiptype field in the edit-type.php component...