6806 matches found
Lost and Found Information System SQL注入漏洞
Lost and Found Information System is a lost and found information system by oretnom23 individual developer. A SQL injection vulnerability exists in Lost and Found Information System version 1.0, which stems from a parameter id in file /classes/Master.php?f=saveinquiry that can lead to sql injecti...
Apache Airflow Path Traversal vulnerability
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized file access outside the intended directory structure by manipulating the runid parameter. This vulnerability is considered low since it requires an authenticated user to exploit i...
PYSEC-2023-104
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized file access outside the intended directory structure by manipulating the runid parameter. This vulnerability is considered low since it requires an authenticated user to exploit i...
PT-2023-4800 · Apache · Apache Airflow
Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.6.3 Description: The issue exists due to insufficient input validation, allowing a remote attacker to cause a service disruption. This can be achieved by manipulating the run id parameter. The exploitation...
PT-2023-4777 · Apache · Apache Airflow
Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.6.3 Description: The issue allows an attacker to perform unauthorized file access outside the intended directory structure by manipulating the run id parameter. This is considered a low-risk issue as it...
Service Provider Management System SQL注入漏洞
Service Provider Management System is a web-based application developed by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. A SQL injection vulnerability exists in SourceCodester Service Provider Management System version 1.0, whic...
PT-2023-25225 · Unknown · Gz Scripts Php Vacation Rental Script
Name of the Vulnerable Software and Affected Versions: GZ Scripts PHP Vacation Rental Script version 1.8 Description: A problematic issue has been found, affecting an unknown part of the file /preview.php. The manipulation of the page, layout, sort by, and property id arguments leads to cross-sit...
CVE-2023-36968
A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...
Sql injection
A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...
CVE-2023-36968
A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...
PT-2023-25200 · Thinutech · Thinucms
Name of the Vulnerable Software and Affected Versions: ThinuTech ThinuCMS version 1.5 Description: A critical issue affects some unknown functionality of the file /category.php. The manipulation of the cat id argument leads to sql injection. The attack may be launched remotely. Recommendations: F...
CVE-2023-36968
A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...
Food Ordering System SQL注入漏洞
Food Ordering System is a food ordering system. A SQL injection vulnerability exists in Food Ordering System v1.0 due to a lack of validation of the id parameter against externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitiv...
PT-2023-25018 · Turnitin · Turnitin Lti Tool
Name of the Vulnerable Software and Affected Versions: Turnitin LTI tool/plugin version 1.3 Description: The issue affects the "Submission Web Form" of the Turnitin LTI tool/plugin, where students submit their reports for similarity/plagiarism checks. Specifically, the submission web form is...
Tenda AC6 跨站脚本漏洞
The Tenda AC6 is a wireless router from Tenda, China. The Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50multi suffers from a cross-site scripting vulnerability, which stems from a cross-site scripting XSS vulnerability found in the deviceId parameter of the Parental Control module...
CVE-2023-3197
The MStore API plugin for WordPress is vulnerable to Unauthenticated Blind SQL Injection via the 'id' parameter in versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the existing SQL query. This makes it possible...
CVE-2023-3339
A vulnerability has been found in code-projects Agro-School Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file exam-delete.php. The manipulation of the argument testid leads to sql injection. The attack can be launched remotely...
PT-2023-24329 · Code Projects · Agro-School Management System
Name of the Vulnerable Software and Affected Versions: code-projects Agro-School Management System version 1.0 Description: A critical issue has been found in the code-projects Agro-School Management System. The problem affects an unknown functionality of the file exam-delete.php. The manipulatio...
Agro-School Management System SQL注入漏洞
Agro-School Management System is an agricultural school management system. A SQL injection vulnerability exists in Agro-School Management System version 1.0, which stems from a problem with the file exam-delete.php, where manipulation of the parameter testid can result in sql injection...