EUVD-2022-34305

Malicious code in bioql PyPI...

EUVD-2022-46335

Malicious code in bioql PyPI...

CVE-2022-43291

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editclient.php...

CVE-2024-8208

The CVE-2024-8208 entry concerns nafisulbari/itsourcecode Insurance Management System v1.0. The vulnerability lies in an unknown functionality of editClient.php where manipulating the AGENT ID parameter triggers cross-site scripting (XSS). Exploitation can be performed remotely and the vulnerabil...

CVE-2024-8208: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in nafisulbari/itsourcecode Insurance Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file editClient.php. The manipulation of the argument AGENT ID leads to cross site scripting. The attack can ...

CVE-2022-43291: Improper Neutralization of Special Elements used in an SQL Command

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editclient.php...

CVE-2022-42073

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=...

CVE-2022-42073: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=...

Online Diagnostic Lab Management System SQL注入漏洞

Online Diagnostic Lab Management System is an online diagnostic lab management system. SQL injection vulnerability exists in Online Diagnostic Lab Management System v1.0, which originates from the /diagnostic/editclient.php The id parameter in /diagnostic/editclient.php is vulnerable to SQL...

CVE-2022-38610

Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editclient.php...

Sql injection

Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editclient.php...

CVE-2022-38610: Improper Neutralization of Special Elements used in an SQL Command

Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editclient.php...

CVE-2022-29999: Improper Neutralization of Special Elements used in an SQL Command

Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editClient.php?clientid=...

CVE-2021-41917

webTareas version 2.4 and earlier allows an authenticated user to store arbitrary web script or HTML by creating or editing a client name in the clients section, due to incorrect sanitization of user-supplied data and achieve a Stored Cross-Site Scripting attack against the platform users and...

CVE-2020-25735: Improper Neutralization of Input During Web Page Generation

webTareas through 2.1 allows XSS in clients/editclient.php, extensions/addextension.php, administration/addannouncement.php, administration/departments.php, administration/locations.php, expenses/claimtype.php, projects/editproject.php, and general/newnotifications.php...

CVE-2017-6090: Unrestricted Upload of File with Dangerous Type

Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logosclients/...