133 matches found
Online Nurse Hiring System 安全漏洞
PHPGurukul Online Nurse Hiring System is an online nurse hiring system from PHPGurukul. A security vulnerability exists in Online Nurse Hiring System v1.0, which stems from an SQL injection vulnerability found in the component /admin/add-nurse.php via the gender and emailid parameters...
CVE-2024-55104
Online Nurse Hiring System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component /admin/add-nurse.php via the gender and emailid parameters...
CVE-2024-55104
CVE-2024-55104 affects Online Nurse Hiring System v1.0. The vulnerability is a set of SQL injection flaws in the /admin/add-nurse.php component, exploitable via the gender and emailid parameters. The CVSSv3.1 metrics indicate a High severity (7.2) with network attack vector, low attack complexity...
Code-Projects Simple Car Rental System 注入漏洞
Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. An injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from incorrect manipulation of the parameters fname, idno, gender, email, phone, and location can...
PT-2024-17147 · Unknown · Code-Projects Simple Car Rental System
Name of the Vulnerable Software and Affected Versions: code-projects Simple Car Rental System version 1.0 Description: A critical issue has been found in the code-projects Simple Car Rental System. The problem is related to an unknown function of the file /book car.php, where the manipulation of...
CVE-2022-30361
OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserType. No authentication is required. The information disclosed is associated with the registered user ID, status, email address, roles, user type, license type, and personal detai...
CVE-2024-7635
A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been classified as critical. Affected is an unknown function of the file registerinsert.php of the component Registration Handler. The manipulation of the argument name/email/dob/password/Gender/phone leads to sql...
MAL-2024-7814 Malicious code in ent-widget-gender (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2c0c2b743a2c55939970f237481ed095952aa3b07c769580ed7564e1be2f14b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ent-widget-gender (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2c0c2b743a2c55939970f237481ed095952aa3b07c769580ed7564e1be2f14b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Rapid7 Signs 100% Talent Compact with Boston Women’s Workforce Council
The effort aims to help close gender and racial pay gaps Rapid7 is proud to announce their signing of the 100% Talent Compact through the Boston Women’s Workforce Council BWWC. The Talent Compact is a collective effort among the Boston Mayor and local employers to close the gender and racial wage...
CVE-2024-3540
A vulnerability was found in Campcodes Church Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/addsundaysch.php. The manipulation of the argument Gender leads to sql injection. The attack may be launched remotely. The...
Church Management System 安全漏洞
Church Management System is a church management system. A security vulnerability exists in version 1.0 of the Church Management System, which stems from an SQL injection vulnerability in the Gender parameter of the /admin/addsundaysch.php file...
PT-2024-26479 · Unknown · Campcodes Church Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Church Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /admin/add sundaysch.php. The manipulation of the Gender argument leads to sql...
gender-rise.com Cross Site Scripting vulnerability OBB-3905229
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-29181 · Unknown · Online Art Gallery
Name of the Vulnerable Software and Affected Versions: Online Art Gallery version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the gender parameter of the header.php resource does not validate the characters received and they are sent...
Storm-0978 unleashes PEAPOD to target Women Political Leaders
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Storm-0978, a threat actor group, utilized a new variant of the RomCom backdoor, "ROMCOM 4.0" also referred to as PEAPOD, to target attendees of the Women Political Leaders WPL Summit in Brussels. This...
New PEAPOD Cyberattack Campaign Targeting Women Political Leaders
European Union military personnel and political leaders working on gender equality initiatives have emerged as the target of a new campaign that delivers an updated version of RomCom RAT called PEAPOD. Cybersecurity firm Trend Micro attributed the attacks to a threat actor it tracks under the nam...
CVE-2023-43720
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "BILLINGGENDERTITLE1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...
CVE-2023-43719
Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "SHIPPINGGENDERTITLE1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...