11667 matches found
Sentrifugo 跨站脚本漏洞
Sentrifugo is a human resource management system. The system includes functions for human resources management, performance appraisal, recruitment management and asset management. Sentrifugo version 3.2 suffers from a cross-site scripting vulnerability that stems from the lack of effective...
PT-2024-23101 · Unknown · Sentrifugo
Name of the Vulnerable Software and Affected Versions: Sentrifugo version 3.2 Description: A Cross-Site Scripting XSS issue exists, allowing a remote user to send a specially crafted URL to the victim and steal their session data. This is achieved through the...
Campcodes Complete Online Beauty Parlor Management System SQL注入漏洞
Campcodes Complete Online Beauty Parlor Management System is an online beauty parlor management system from Campcodes, Inc. A SQL injection vulnerability exists in Campcodes Complete Online Beauty Parlor Management System version 1.0, which originates from an SQL injection vulnerability in the...
PT-2024-21988 · Unknown · Campcodes Complete Online Beauty Parlor Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Complete Online Beauty Parlor Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /admin/edit-services.php. The manipulation of the editid argument leads to...
CVE-2024-1785 Contests by Rewards Fuel <= 2.0.62 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Contests by Rewards Fuel plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.62. This is due to missing or incorrect nonce validation on the ajaxhandler function. This makes it possible for unauthenticated attackers to update the plugin's...
CVE-2024-2570
A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file /edit-task.php. The manipulation leads to execution after redirect. It is possible to initiate the attack remotely. The exploit has been...
CVE-2024-2570 SourceCodester Employee Task Management System edit-task.php redirect
A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file /edit-task.php. The manipulation leads to execution after redirect. It is possible to initiate the attack remotely. The exploit has been...
CVE-2024-2570 SourceCodester Employee Task Management System edit-task.php redirect
A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file /edit-task.php. The manipulation leads to execution after redirect. It is possible to initiate the attack remotely. The exploit has been...
Employee Task Management System Security Vulnerability
Employee Task Management System is an employee task management system by Carlo Montero Personal Developer. A security vulnerability exists in Employee Task Management System version 1.0, which originates from an unknown function in /edit-task.php that can be exploited by an attacker to bypass...
PT-2024-21309 · Fujian Kelixin · Fujian Kelixin Communication Command/Dispatch Platform
Name of the Vulnerable Software and Affected Versions: Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 Description: A critical issue has been found, affecting an unknown part of the file /api/client/editemedia.php. The manipulation of the enterprise uuid argument leads t...
Employee Task Management System Security Vulnerability
Employee Task Management System is an Employee Task Management System by Carlo Montero Personal Developer. A security vulnerability exists in Employee Task Management System, which originates from a redirected execution in the file /edit-task.php...
PT-2024-21098 · Sourcecodester · Sourcecodester Employee Task Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Task Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Employee Task Management System, affecting an unknown part of the file /edit-task.php. The manipulation leads to...
PT-2024-21121 · Sourcecodester · Sourcecodester Employee Task Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Task Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Employee Task Management System, affecting an unknown functionality of the file /edit-task.php. The manipulation ...
mediawiki -- multiple vulnerabilities
Mediawiki reports: T355538, CVE-2024-PENDING SECURITY: XSS in edit summary parser. T357760, CVE-2024-PENDING SECURITY: Denial of service vector via GET request to Special:MovePage on pages with thousands of subpages...
RiteCMS Cross-Site Scripting Vulnerability (CNVD-2025-21552)
RiteCMS is an open source content management system based on PHP and SQLite. RiteCMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the component mainmenu/editsection, which can be exploited by an attacker to...
CVE-2024-28669
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/freelistedit.php...
CVE-2024-28681
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/plusedit.php...
CVE-2024-28672
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/mediaedit.php...