HotelDruid-CVE-2021-42948

CVE-2021-42948 HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's. The session token used to access authenticated pages of the application is passed using GET...

CVE-2026-14705 code-projects Online Examination head.php sql injection

A vulnerability was determined in code-projects Online Examination 1.0. Affected by this issue is some unknown functionality of the file head.php. Executing a manipulation of the argument uname/password can lead to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-14705

A vulnerability was determined in code-projects Online Examination 1.0. Affected by this issue is some unknown functionality of the file head.php. Executing a manipulation of the argument uname/password can lead to sql injection. It is possible to launch the attack remotely. The exploit has been...

PT-2026-55766

Name of the Vulnerable Software and Affected Versions code-projects Online Examination version 1.0 Description An issue exists in the head.php file where manipulating the uname and password arguments can lead to SQL injection, a technique used to interfere with the queries that an application mak...

Conjure Position Department Service Quality Evaluation System 安全漏洞

Conjure Position Department Service Quality Evaluation System is a position department service quality evaluation system from China Star Space Conjure. A security vulnerability exists in Conjure Position Department Service Quality Evaluation System version 1.0.11 and earlier versions, which...

Wwbn Avideo 跨站脚本漏洞

Wwbn Avideo is a video platform builder written in PHP by the Wwbn WWBN team. A security vulnerability exists in objects/function.php in the function getDeviceID in Wwbn Avideo before 11.6, which allows an attacker to view /include/head.php with the yptDevice parameter...

Ruubikcms 1.0.3 - 'head.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46794/info RuubikCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the...

City Writer 'head.php'远程文件包含漏洞

City Writer是一款基于PHP的WEB应用程序。 City Writer不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'head.php'脚本对用户提交的'path'参数缺少过滤，提交远程服务器上的任意文件作为包含对象，可导致以WEB权限执行任意PHP代码。 City Writer 0.9.7 目前没有解决方案提供： http://hulihanapplications.com/citywriter/...

CityWriter 0.9.7 head.php Remote File Inclusion Vulnerability

No description provided by source. Name : CityWriter 0.9.7 Remote File Include Download From : http://download.hulihanapplications.com/citywriter/citywriter-0.97.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : ============================================================================ Vulne...

citywriter-rfi.txt

Name : CityWriter 0.9.7 Remote File Include Download From : http://download.hulihanapplications.com/citywriter/citywriter-0.97.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : ============================================================================ Vulne Code In File head.php In Line 1:...

CityWriter 0.9.7 - 'head.php' Remote File Inclusion

Name : CityWriter 0.9.7 Remote File Include Download From : http://download.hulihanapplications.com/citywriter/citywriter-0.97.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : ============================================================================ Vulne Code In File head.php In Line 1:...