713 matches found
CVE-2023-51246
A Cross Site Scripting XSS vulnerability in GetSimple CMS 3.3.16 exists when using Source Code Mode as a backend user to add articles via the /admin/edit.php page...
CVE-2023-51246
A Cross Site Scripting XSS vulnerability in GetSimple CMS 3.3.16 exists when using Source Code Mode as a backend user to add articles via the /admin/edit.php page...
CVE-2023-51246: Improper Neutralization of Input During Web Page Generation
A Cross Site Scripting XSS vulnerability in GetSimple CMS 3.3.16 exists when using Source Code Mode as a backend user to add articles via the /admin/edit.php page...
CVE-2023-51246
CVE-2023-51246 concerns GetSimple CMS 3.3.16 where an XSS exists when a backend user adds articles via /admin/edit.php with Source Code Mode active. The root cause is inadequate filtering/escaping of user-supplied data during article creation, leading to arbitrary script execution. Affected produ...
PT-2024-15450
Name of the Vulnerable Software and Affected Versions Kashipara Food Management System version 1.0 Description A critical issue has been found in the Kashipara Food Management System, affecting the processing of the file stock edit.php. The manipulation of the item type argument leads to SQL...
CVE-2023-6188
A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the file /admin/theme-edit.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and ma...
CVE-2023-6188: Improper Control of Generation of Code
A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the file /admin/theme-edit.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and ma...
CVE-2023-33479
RemoteClinic version 2.0 contains a SQL injection vulnerability in the /staff/edit.php file...
CVE-2023-33479
RemoteClinic version 2.0 contains a SQL injection vulnerability in the /staff/edit.php file...
CVE-2023-33479: Improper Neutralization of Special Elements used in an SQL Command
RemoteClinic version 2.0 contains a SQL injection vulnerability in the /staff/edit.php file...
CVE-2023-33479
RemoteClinic version 2.0 contains a SQL injection vulnerability in the /staff/edit.php file...
PT-2023-28960 · Unknown · Online Book Store Project
Name of the Vulnerable Software and Affected Versions: Online Book Store Project version 1.0 Description: The issue allows an authenticated attacker to obtain Remote Code Execution on the server hosting the application via an Insecure File Upload vulnerability on the image parameter of the "admin...
CVE-2023-38838
SQL injection vulnerability in Kidus Minimati v.1.0.0 allows a remote attacker to obtain sensitive information via the edit.php component...
CVE-2023-38838
SQL injection vulnerability in Kidus Minimati v.1.0.0 allows a remote attacker to obtain sensitive information via the edit.php component...
Sql injection
SQL injection vulnerability in Kidus Minimati v.1.0.0 allows a remote attacker to obtain sensitive information via the edit.php component...
Minimati SQL injection vulnerability
Minimati is a simple, lightweight and open source CMS by Kidus Personal Developers. A security vulnerability exists in Minimati version v.1.0.0, which stems from the presence of a SQL injection vulnerability that allows remote attackers to obtain sensitive information via the edit.php component...
CVE-2023-38838
SQL injection vulnerability in Kidus Minimati v.1.0.0 allows a remote attacker to obtain sensitive information via the edit.php component...
PT-2023-23543
Name of the Vulnerable Software and Affected Versions Online Travel Agency System version 1.0 Description A SQL injection issue allows a remote attacker to execute arbitrary code via the id parameter at the "daily expenditure edit.php" endpoint. This enables the attacker to potentially access and...