PT-2023-26340 · Unknown · Bug Finder Listplace Directory Listing Platform

Name of the Vulnerable Software and Affected Versions: Bug Finder Listplace Directory Listing Platform version 3.0 Description: A vulnerability was found in the HTTP POST Request Handler component, specifically affecting some unknown functionality of the file /listplace/user/ticket/create. The...

PT-2023-26372 · Unknown · Bug Finder Ex-Rate

Name of the Vulnerable Software and Affected Versions: Bug Finder EX-RATE version 1.0 Description: A vulnerability was found in the Ticket Handler component, affecting some unknown functionality of the file /user/ticket/create. The manipulation of the message argument leads to cross-site scriptin...

Bug Finder Listplace 跨站脚本漏洞

Bug Finder Listplace is a powerful directory listing platform from Bug Finder, Inc. A cross-site scripting vulnerability exists in Bug Finder Listplace version 3.0, which stems from an unknown function in file /listplace/user/coverPhotoUpdate in the component Photo Handler, leading to cross-site...

Bug Finder EX-RATE 跨站脚本漏洞

Bug Finder EX-RATE is a currency exchange solution from Bug Finder, Inc. A cross-site scripting vulnerability exists in Bug Finder EX-RATE version 1.0, which stems from some unknown processing in the file /user/ticket/create in the component Ticket Handler, leading to cross-site scripting via the...

Bug Finder SASS BILLER 跨站脚本漏洞

Bug Finder SASS BILLER is a SASS-based invoicing and billing platform from Bug Finder, Inc. A cross-site scripting vulnerability exists in Bug Finder SASS BILLER version 1.0, which stems from some unknown processing in the file /user/ticket/create in the component Ticket Handler, leading to...

PT-2023-26357 · Unknown · Bug Finder Wedding Wonders

Name of the Vulnerable Software and Affected Versions: Bug Finder Wedding Wonders version 1.0 Description: A vulnerability was found in the Ticket Handler component, specifically in the /user/ticket/create file, where an unknown function is affected. The manipulation of the message argument leads...

Bug Finder Wedding Wonders 跨站脚本漏洞

Bug Finder Wedding Wonders is a matchmaking and marriage platform from Bug Finder, Inc. A cross-site scripting vulnerability exists in Bug Finder Wedding Wonders version 1.0, which stems from some unknown processing in the file /user/ticket/create in the component Ticket Handler, leading to...

PT-2023-26351 · Unknown · Bug Finder Finounce

Name of the Vulnerable Software and Affected Versions: Bug Finder Finounce version 1.0 Description: A vulnerability was found in the Ticket Handler component, affecting the processing of the file "/user/ticket/create". The manipulation of the message argument leads to cross-site scripting. The...

PT-2023-26377 · Unknown · Bug Finder Minestack

Name of the Vulnerable Software and Affected Versions: Bug Finder MineStack version 1.0 Description: A problematic issue has been discovered, affecting the Ticket Handler component, specifically an unknown part of the file /user/ticket/create. The manipulation of the message argument leads to...

PT-2023-26350 · Unknown · Bug Finder Sass Biller

Name of the Vulnerable Software and Affected Versions: Bug Finder SASS BILLER version 1.0 Description: A problematic issue affects some unknown processing of the file /company/store. The manipulation of the name argument leads to cross-site scripting. The attack may be initiated remotely. The...

Bug Finder SASS BILLER 跨站脚本漏洞

Bug Finder SASS BILLER is a SASS-based invoicing and billing platform from Bug Finder, Inc. A cross-site scripting vulnerability exists in Bug Finder SASS BILLER version 1.0, which stems from the presence of certain unknown processing in the file /company/store, leading to cross-site scripting vi...

Bug Finder Montage 跨站脚本漏洞

Bug Finder Montage is a complete web platform for hotel/resort booking and property sales solutions from Bug Finder, Inc. A cross-site scripting vulnerability exists in Bug Finder Montage version 1.0, which stems from some unknown processing in the file /user/ticket/create in the component Ticket...

Listplace Directory Listing Platform 3.0 File Upload / Cross Site Scripting

Exploit Title: Listplace Directory Listing Platform 3.0 - Arbitrary File Upload Exploit Author: CraCkEr Date: 12/07/2023 Vendor: Bug Finder Vendor Homepage: https://bugfinder.net/ Software Link: https://bugfinder.net/product/listplace-a-complete-directory-listing-platform/22 Tested on: Windows 10...

CVE-2023-3796

A vulnerability, which was classified as problematic, has been found in Bug Finder Foody Friend 1.0. Affected by this issue is some unknown functionality of the file /user/profile of the component Profile Picture Handler. The manipulation of the argument profilepicture leads to unrestricted uploa...

CVE-2023-3795

A vulnerability classified as critical was found in Bug Finder ChainCity Real Estate Investment Platform 1.0. Affected by this vulnerability is an unknown functionality of the file /property of the component GET Parameter Handler. The manipulation of the argument name leads to sql injection. The...

CVE-2023-3796

A vulnerability, which was classified as problematic, has been found in Bug Finder Foody Friend 1.0. Affected by this issue is some unknown functionality of the file /user/profile of the component Profile Picture Handler. The manipulation of the argument profilepicture leads to unrestricted uploa...

Out-of-bounds

A vulnerability, which was classified as problematic, has been found in Bug Finder Foody Friend 1.0. Affected by this issue is some unknown functionality of the file /user/profile of the component Profile Picture Handler. The manipulation of the argument profilepicture leads to unrestricted uploa...

CVE-2023-3796

CVE-2023-3796 affects Bug Finder Foody Friend 1.0, specifically the Profile Picture Handler’s /user/profile and the profile_picture parameter. The issue permits unrestricted file uploads via remote access, as described across multiple feeds (NVD, Red Hat, CVE records, and industry sources). The v...

CVE-2023-3795

CVE-2023-3795 affects Bug Finder ChainCity Real Estate Investment Platform 1.0. The vulnerability is a SQL injection in the file handling the GET Parameter Handler for the /property endpoint, caused by manipulation of the name argument. Documented impact is high confidentiality, integrity, and av...

Cross site scripting

A vulnerability classified as problematic has been found in Bug Finder ChainCity Real Estate Investment Platform 1.0. Affected is an unknown function of the file /chaincity/user/ticket/create of the component New Ticket Handler. The manipulation of the argument subject leads to cross site...