CVE-2022-41431

xzs v3.8.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /admin/question/edit. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title text field...

xzs 跨站脚本漏洞

Civic Jump Technology xzs Learning Zest Open Source Exam System is the Learning Zest Open Source Exam System from Civic Jump Technology. A security vulnerability exists in xzs version v3.8.0, which originated from a cross-site scripting XSS vulnerability found in the component /admin/question/edi...

CVE-2022-41431

xzs v3.8.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /admin/question/edit. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title text field...

CVE-2022-41431: Improper Neutralization of Input During Web Page Generation

xzs v3.8.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /admin/question/edit. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title text field...

Online Diagnostic Lab Management System 代码问题漏洞

Online Diagnostic Lab Management System is an online diagnostic lab management system. A security vulnerability exists in Online Diagnostic Lab Management System version v1.0, which originates from an arbitrary file upload vulnerability contained through the component...

The vulnerability of the admin_edit.php implementation in the online book store allows a hacker to execute arbitrary code.

The vulnerability of the adminedit.php script used by the Online Book Store involves a lack of protection for the SQL query structure when processing the bookisbn parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

PT-2022-22301 · Sourcecodester · Sourcecodester Human Resource Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Management System affected versions not specified Description: A critical issue affects the SourceCodester Human Resource Management System, specifically some unknown functionality of the file city.php. The...

Design/Logic Flaw

SAP BusinessObjects Business Intelligence platform Analysis for OLAP - versions 420, 430, allows an authenticated attacker to send user-controlled inputs when OLAP connections are created and edited in the Central Management Console. On successful exploitation, there could be a limited impact on...

CVE-2022-42236

A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form...

CVE-2022-42236

A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form...

CVE-2022-42229

Wedding Planner v1.0 is vulnerable to Arbitrary code execution via packageedit.php...

Cross site scripting

A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form...

CVE-2022-42236

A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form...

Wedding Planner 代码问题漏洞

Wedding Planner is a wedding planner program by pushpam abhishek. Designed to provide users with an easy way to plan their wedding through a web application while using real data. A code issue vulnerability exists in Wedding Planner v1.0 that stems from easy execution of arbitrary code via...

Merchandise Online Store 跨站脚本漏洞

Merchandise Online Store is a Merchandise Online Store system by Carlo Montero Personal Developer. A cross-site scripting vulnerability exists in Merchandise Online Store v.1.0, which stems from a stored XSS issue that allows arbitrary JavaScript to be injected in the form of an edit account...

PT-2022-26324 · Unknown · Merchandise Online Store

Name of the Vulnerable Software and Affected Versions: Merchandise Online Store version 1.0 Description: A Stored XSS issue allows the injection of arbitrary JavaScript in the edit account form. Recommendations: For version 1.0, update the edit account form to properly sanitize user input and...

CVE-2022-42236: Improper Neutralization of Input During Web Page Generation

A Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript in edit account form...

Online Diagnostic Lab Management System SQL Injection Vulnerability (CNVD-2022-68287)

Online Diagnostic Lab Management System is an online diagnostic lab management system. SQL injection vulnerability exists in Online Diagnostic Lab Management System v1.0, which originates from the /diagnostic/editclient.php The id parameter in /diagnostic/editclient.php is vulnerable to SQL...

CVE-2022-3436

A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack can be launche...

CVE-2022-3436

A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack can be launche...