Online Security Guards Hiring System SQL注入漏洞

WordPress WP Shopping Pages plugin cross-site scripting vulnerability...

CVE-2023-39551

PHPGurukul Online Security Guards Hiring System v1.0 is vulnerable to SQL Injection via osghs/admin/search.php. Root cause: unsafe handling of user input leading to SQL query manipulation. Impact given: high impact to confidentiality, integrity, and availability (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U...

CVE-2023-39551: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Online Security Guards Hiring System v.1.0 is vulnerable to SQL Injection via osghs/admin/search.php...

CVE-2023-39551

PHPGurukul Online Security Guards Hiring System v.1.0 is vulnerable to SQL Injection via osghs/admin/search.php...

编号撤回

Online Security Guards Hiring System is an online security guard hiring system. A security vulnerability exists in Online Security Guards Hiring System version v.1.0. The vulnerability can be exploited by an attacker to perform cross-site scripting attacks...

PT-2023-27017 · Unknown · Phpgurukul Online Security Guards Hiring System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Security Guards Hiring System version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the "osghs/admin/search.php" API endpoint. No information is provided about the estimated number of...

PT-2023-27018 · Unknown · Phpgurukul Online Security Guards Hiring System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Security Guards Hiring System version 1.0 Description: The issue concerns a Cross-Site Scripting XSS problem. Recommendations: For PHPGurukul Online Security Guards Hiring System version 1.0, at the moment, there is no...

编号撤回

Online Security Guards Hiring System is an online security guard hiring system. This CVE number has been withdrawn...

CVE-2023-36936

Cross-Site Scripting XSS vulnerability in PHPGurukul Online Security Guards Hiring System using PHP and MySQL 1.0 allows attackers to execute arbitrary code via a crafted payload to the search booking box...

CVE-2023-36936

Cross-Site Scripting XSS vulnerability in PHPGurukul Online Security Guards Hiring System using PHP and MySQL 1.0 allows attackers to execute arbitrary code via a crafted payload to the search booking box...

Online Security Guards Hiring System 跨站脚本漏洞

Online Security Guards Hiring System is an online security guard hiring system. A security vulnerability exists in Online Security Guards Hiring System version 1.0, which can be exploited to execute arbitrary code via a search booking box...

CVE-2023-36936: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in PHPGurukul Online Security Guards Hiring System using PHP and MySQL 1.0 allows attackers to execute arbitrary code via a crafted payload to the search booking box...

CVE-2023-36936

CVE-2023-36936 affects PHPGurukul Online Security Guards Hiring System v1.0. A cross-site scripting (XSS) flaw exists in the search booking box endpoint, enabling arbitrary script execution via a crafted payload. Documented impact is XSS with potential to affect confidentiality/integrity, and the...

User can manipulate approvals and disapprovals of relative quorum strategy

Lines of code Vulnerability details Impact A malicious user with sufficient permissions can manipulate approvals and disapprovals of actions using the relative quorum strategy. They could effectively ensure that any action has an 100% chance of being approved or disapproved, even when the...

Online Security Guards Hiring System 1.0 - Reflected XSS

Exploit Title: Online Security Guards Hiring System 1.0 – REFLECTED XSS Google Dork : NA Date: 23-01-2023 Exploit Author : AFFAN AHMED Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/projects/Online-Security-Guard-Hiring-SystemPHP.zip Version: 1.0 Tested on: Windows ...

CVE-2023-2273

Rapid7 Insight Agent token handler versions 3.2.6 and below, suffer from a Directory Traversal vulnerability whereby unsanitized input from a CLI argument flows into io.ioutil.WriteFile, where it is used as a path. This can result in a Path Traversal vulnerability and allow an attacker to write...

CVE-2023-2273 Rapid7 Insight Agent Directory Traversal

Rapid7 Insight Agent token handler versions 3.2.6 and below, suffer from a Directory Traversal vulnerability whereby unsanitized input from a CLI argument flows into io.ioutil.WriteFile, where it is used as a path. This can result in a Path Traversal vulnerability and allow an attacker to write...

SUSE CVE-2011-2768

Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part of an outgoing OR connection, which allows remote relays to bypass intended anonymity properties by reading this chain and then determining the set of entry guards that the client or bridge had...

CVE-2023-0527

CVE-2023-0527 affects PHPGurukul Online Security Guards Hiring System 1.0. The vulnerability is a reflected cross-site scripting in the search-request.php file, where the argument searchdata can be injected with malicious JavaScript (e.g., ). This allows an attacker to execute script in the victi...

CVE-2023-0527 PHPGurukul Online Security Guards Hiring System search-request.php cross site scripting

A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file search-request.php. The manipulation of the argument searchdata with the input "alertdocument.domain leads to cross site...