13398 matches found
CVE-2023-0883: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /php-opos/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has...
CVE-2021-33396
Cross Site Request Forgery CSRF vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php...
CVE-2021-33396
Cross Site Request Forgery CSRF vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php...
Cross site request forgery (csrf)
Cross Site Request Forgery CSRF vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php...
SUSE CVE-2007-1395
Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cross-site scripting XSS attacks by injecting arbitrary JavaScript or HTML in a 1 db or 2 table parameter value followed by an uppercase end tag, which bypasses the protection...
SUSE CVE-2007-6100
Cross-site scripting XSS vulnerability in libraries/auth/cookie.auth.lib.php in phpMyAdmin before 2.11.2.2, when logins are authenticated with the cookie authtype, allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter to index.php, a different vulnerability...
CVE-2021-33396
Cross Site Request Forgery CSRF vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php...
CVE-2021-33396
The CVE-2021-33396 entry describes a CSRF vulnerability in BaijiaCMS 4.1.4 that allows an attacker to change the password or other data of an arbitrary account via index.php. The root cause is CSRF in the account-management flow; impact is high for integrity (unauthorized changes) with no confide...
PT-2023-12212
Name of the Vulnerable Software and Affected Versions baijiacms version 4.1.4 Description The issue allows attackers to change the password or other information of an arbitrary account via "index.php". This is a Cross Site Request Forgery CSRF vulnerability, which occurs when an attacker can tric...
CVE-2021-33396
Cross Site Request Forgery CSRF vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php...
CVE-2021-33396: Cross-Site Request Forgery (CSRF)
Cross Site Request Forgery CSRF vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php...
PT-2023-11576
Name of the Vulnerable Software and Affected Versions UQCMS version 2.1.3 Description The issue allows attackers to execute arbitrary commands via the cookie cart parameter to the "/index.php/cart/num" API endpoint. This is due to a SQL Injection vulnerability in the file...
CVE-2023-24648
Zstore v6.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /index.php...
Cross site scripting
Zstore v6.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /index.php...
CVE-2023-24648
Zstore v6.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /index.php...
CVE-2023-24648
Zstore v6.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /index.php...
CVE-2023-24648
Zstore v6.6.0 has an XSS vulnerability in the component /index.php. The issue is described as CVSS v3.1 base score 6.1 (Medium) with Network attack vector, low confidentiality/integrity impact, no availability impact; user interaction required. The vulnerability is tied to the /index.php entry po...
CVE-2023-24648: Improper Neutralization of Input During Web Page Generation
Zstore v6.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /index.php...
PT-2023-19723
Name of the Vulnerable Software and Affected Versions Zstore version 6.6.0 Description A cross-site scripting XSS issue was found in the /index.php component. This allows for potential malicious script execution. Recommendations For Zstore version 6.6.0, update to a newer version that contains a...