CVE-2023-51813

Cross Site Request Forgery CSRF vulnerability in Free Open-Source Inventory Management System v.1.0 allows a remote attacker to execute arbitrary code via the stafflist parameter in the index.php component...

CVE-2023-41447

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the subcmd parameter in the index.php component...

PT-2023-27950 · Unknown · Phpkobo Ajaxnewticker

Name of the Vulnerable Software and Affected Versions: phpkobo AjaxNewTicker version 1.0.5 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via a crafted payload to the subcmd parameter in the "index.php" component. Recommendations: For phpkobo...

Zippy Store 跨站脚本漏洞

Zippy Store is a web interface accounting program by Leon Personal Developer. Designed to automate small businesses through a simplified form of accounts without the use of full accounts. A security vulnerability exists in Zippy Store version v6.6.0, which stems from a cross-site scripting XSS...