CVE-2023-43884

A Cross-site scripting XSS vulnerability in Reference ID from the panel Transactions, of Subrion v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Reference ID' parameter...

CVE-2023-30415

Sourcecodester Packers and Movers Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /inquiries/viewinquiry.php...

PT-2023-22682 · Unknown · Sourcecodester Packers/Movers Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Packers and Movers Management System version 1.0 Description: The issue is a SQL injection vulnerability that can be exploited via the id parameter at the "/inquiries/view inquiry.php" API endpoint. This vulnerability allows...

CVE-2023-41448

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the ID parameter in the index.php component...

CVE-2023-44016

Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function...

CVE-2023-43381

SQL Injection vulnerability in Tianchoy Blog v.1.8.8 allows a remote attacker to obtain sensitive information via the id parameter in the login.php...

CVE-2023-41448

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the ID parameter in the index.php component...

Tenda AC10 缓冲区错误漏洞

Tenda AC10U is a dual-band Gigabit wireless router from Tenda Technology, designed for 200 megabit and above fiber optic homes, supporting 802.11ac dual-band technology 2.4GHz and 5GHz, with a theoretical WiFi rate of up to 867Mbps. The Tenda AC10U suffers from a stack buffer overflow vulnerabili...

PT-2023-26649 · Unknown · Gugoan Economizzer

Name of the Vulnerable Software and Affected Versions: gugoan Economizzer versions 0.9-beta1 and commit 3730880 April 2023 Description: A SQL injection vulnerability exists in the cash book feature of gugoan Economizzer, specifically in the category id parameter, which is used to list...

CVE-2023-41448

CVE-2023-41448 concerns phpkobo AjaxNewTicker v1.0.5. The vulnerability lies in the index.php component, where the ID parameter can be crafted to trigger a cross-site scripting (XSS) flaw. This XSS could allow a remote attacker to execute arbitrary code (as stated in the sources) by supplying a m...

CVE-2023-43381

SQL Injection vulnerability in Tianchoy Blog v.1.8.8 allows a remote attacker to obtain sensitive information via the id parameter in the login.php...

CVE-2023-43457

An issue in Service Provider Management System v.1.0 allows a remote attacker to gain privileges via the ID parameter in the /php-spms/admin/?page=user/ endpoint...

CVE-2023-43457

An issue in Service Provider Management System v.1.0 allows a remote attacker to gain privileges via the ID parameter in the /php-spms/admin/?page=user/ endpoint...

Code injection

An issue in Service Provider Management System v.1.0 allows a remote attacker to gain privileges via the ID parameter in the /php-spms/admin/?page=user/ endpoint...

Service Provider Management System Security Vulnerability

Service Provider Management System is a web-based application developed by Carlo Montero, an individual developer. It is designed to provide dynamic web sites for service provider companies. A security vulnerability exists in Service Provider Management System version v.1.0 that originates from a...

CVE-2023-43457

An issue in Service Provider Management System v.1.0 allows a remote attacker to gain privileges via the ID parameter in the /php-spms/admin/?page=user/ endpoint...

Projectworldsl Assets-management-system-in-php SQL Injection Vulnerability

Assets-management-system-in-php is a PHP asset management system for projectworlds individual developers. A security vulnerability exists in Projectworldsl Assets-management-system-in-php version 1.0, which stems from a SQL injection vulnerability in the parameter id of the file delete.php...

CVE-2023-43274

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter...

Sql injection

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter...

PHP Shopping Cart SQL Injection Vulnerability

PHP Shopping Cart is Phpjabbers open source a shopping cart system . PHP Shopping Cart 4.2 version has a security vulnerability , the vulnerability stems from the parameter id SQL injection vulnerability...