618 matches found
CVE-2021-41434
CVE-2021-41434 affects Expense Management System version 1.0 and is a stored XSS vulnerability that allows arbitrary JavaScript execution through index.php. The Red Hat/NVD entries confirm a stored XSS issue with the same vector, impacting the application as described; no exploit details are prov...
CVE-2021-41434
A stored Cross-Site Scripting XSS vulnerability exists in version 1.0 of the Expense Management System application that allows for arbitrary execution of JavaScript commands through index.php...
PT-2022-11402 · Unknown · Expense Management System
Name of the Vulnerable Software and Affected Versions: Expense Management System version 1.0 Description: A stored Cross-Site Scripting XSS issue exists in the Expense Management System application, allowing for arbitrary execution of JavaScript commands through the "index.php" endpoint. This...
Expense Management System 跨站脚本漏洞
Expense Management System is an expense management system by Carlo Montero Personal Developer. A security vulnerability exists in Expense Management System version 1.0, which stems from a stored cross-site scripting XSS vulnerability that allows arbitrary JavaScript commands to be executed via...
CVE-2022-40098
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/updateexpense.php...
CVE-2022-40098
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/updateexpense.php...
CVE-2022-40099
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/updateexpensecategory.php...
Sql injection
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/updateexpense.php...
CVE-2022-40099
Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/updateexpensecategory.php...
Online Tours & Travels Management System SQL注入漏洞
Online Tours & Travels Management System is an online travel management system by Mayuri K. Personal developer. A SQL injection vulnerability exists in Online Tours & Travels Management System version v1.0 due to a lack of validation of the id parameter in its /admin/updateexpensecategory.php...
PT-2022-25201 · Unknown · Online Tours & Travels Management System
Name of the Vulnerable Software and Affected Versions: Online Tours & Travels Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/update expense category.php" API endpoint...
Online Tours & Travels Management System SQL注入漏洞
Online Tours & Travels Management System is an online travel management system by Mayuri K. Personal developer. A SQL injection vulnerability exists in Online Tours & Travels Management System version v1.0 due to a lack of validation of externally-entered SQL statements in the id parameter of its...
Denial Of Service (DoS)
jose is vulnerable to denial of service. The vulnerability exists in the multiple functions in decrypt.ts due to not limiting the computational expense of default PBES2 algorithm, allowing an attacker to crash the application by providing malicious input...
Expense Management System SQL注入漏洞
Expense Management System is an expense management system. version v1.0 of Expense Management System is vulnerable to SQL injection, which stems from a lack of validation of external input SQL statements in the id parameter of its /Home/debitcreditp component. An attacker could use this...
CVE-2022-36754
Expense Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Home/debitcreditp...
CVE-2022-36754
Expense Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Home/debitcreditp...
CVE-2022-36754
Expense Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Home/debitcreditp...
Sql injection
Expense Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Home/debitcreditp...
CVE-2022-36754
Expense Management System v1.0 is vulnerable to SQL injection via the id parameter in /Home/debit_credit_p. The issue is caused by lack of input validation, allowing potentially unauthorized SQL statements. The NVD entry lists CVSS v3.1: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H with base score 7.2 ( H...