714 matches found
GHSA-WCJ4-FF9M-5R7G ImpressCMS Path Traversal to Arbitrary File Delete
Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the imagepath parameter in a cancel action...
Dolibarr ERP and CRM contain XSS Vulnerability
Cross-site scripting XSS vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php...
Dolibarr SQL injection vulnerability in admin/menus/edit.php
SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter...
GHSA-QM8M-7626-762H Dolibarr SQL injection vulnerability in admin/menus/edit.php
SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter...
Cross site scripting
A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like alert1 leads to cross site scripting. The attack may be launched remote...
CVE-2022-1503 GetSimple CMS Content Module edit.php cross site scripting
A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like alert1 leads to cross site scripting. The attack may be launched remote...
PT-2022-13918
Name of the Vulnerable Software and Affected Versions GetSimple CMS affected versions not specified Description A problematic issue has been found in GetSimple CMS, affecting the file /admin/edit.php of the Content Module. The manipulation of the post-content argument with an input like alert1...
CVE-2022-1503: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the file /admin/edit.php of the Content Module. The manipulation of the argument post-content with an input like leads to cross site scripting. The attack may be launched remotely but...
PT-2022-18758
Name of the Vulnerable Software and Affected Versions Attendance and Payroll System version 1.0 Description A SQL injection issue was found in the Attendance and Payroll System, specifically via the adminemployee edit.php component. Recommendations For Attendance and Payroll System version 1.0,...
PT-2022-18756
Name of the Vulnerable Software and Affected Versions Attendance and Payroll System version 1.0 Description A SQL injection issue was found in the Attendance and Payroll System, specifically via the adminovertime edit.php component. Recommendations For Attendance and Payroll System version 1.0,...
PT-2022-18752
Name of the Vulnerable Software and Affected Versions Attendance and Payroll System version 1.0 Description The Attendance and Payroll System contains a SQL injection issue via the schedule employee edit.php component in the admin directory. Recommendations For Attendance and Payroll System versi...
PT-2022-18755
Name of the Vulnerable Software and Affected Versions Attendance and Payroll System version 1.0 Description The Attendance and Payroll System contains a SQL injection vulnerability. This issue is present in the deduction edit.php component, located in the admin directory. Recommendations For...
PT-2022-18754
Name of the Vulnerable Software and Affected Versions Attendance and Payroll System version 1.0 Description The Attendance and Payroll System contains a SQL injection vulnerability via the component admincashadvance edit.php. This issue allows for potential exploitation. Recommendations For...
PT-2022-18757
Name of the Vulnerable Software and Affected Versions Attendance and Payroll System version 1.0 Description A SQL injection issue was found in the Attendance and Payroll System via the adminschedule edit.php component. Recommendations For Attendance and Payroll System version 1.0, consider...
PT-2022-18753
Name of the Vulnerable Software and Affected Versions Attendance and Payroll System version 1.0 Description A SQL injection issue was found in the Attendance and Payroll System via the adminattendance edit.php component. Recommendations For Attendance and Payroll System version 1.0, consider...
PT-2022-18760
Name of the Vulnerable Software and Affected Versions Attendance and Payroll System version 1.0 Description A SQL injection issue was found in the Attendance and Payroll System via the adminposition edit.php component. Recommendations For Attendance and Payroll System version 1.0, consider...
CVE-2021-26601
ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php imagetemp Directory Traversal...
PT-2022-9763
Name of the Vulnerable Software and Affected Versions ImpressCMS versions prior to 1.4.3 Description The issue allows directory traversal via the image temp parameter in the libraries/image-editor/image-edit.php file. This can potentially lead to unauthorized access to sensitive files on the...
