EUVD-2020-18681

Malware in sbrugna...

EUVD-2023-56059

Malicious code in bioql PyPI...

EUVD-2022-43407

Malicious code in bioql PyPI...

CVE-2025-10566: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /index.php?page=users. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2025-8950: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in Campcodes Online Recruitment Management System 1.0. This issue affects some unknown processing of the file /Recruitment/index.php?page=viewvacancy. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2024-10348: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php?page=tenants of the component Manage Tenant Details. The manipulation of the argument Last Name/First Name/Middle Name...

CVE-2024-46212

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...

CVE-2024-46212: Improper Limitation of a Pathname to a Restricted Directory

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...

CVE-2024-7281: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Lot Reservation Management System 1.0. Affected is an unknown function of the file /admin/index.php?page=managelot. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-6936

A vulnerability, which was classified as problematic, has been found in formtools.org Form Tools 3.1.1. This issue affects some unknown processing of the file /admin/settings/index.php?page=accounts of the component Setting Handler. The manipulation of the argument Page Theme leads to code...

CVE-2024-4931: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Online Bidding System 1.0. This issue affects some unknown processing of the file /simple-online-bidding-system/admin/index.php?page=viewudet. The manipulation of the argument id leads to sql injection. The...

CVE-2023-49974: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contact parameter at /customersupport/index.php?page=customerlist...

CVE-2023-49971: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at /customersupport/index.php?page=customerlist...

CVE-2023-49976: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at /customersupport/index.php?page=newticket...

CVE-2023-49973: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customersupport/index.php?page=customerlist...

Exploit for Cross-site Scripting in Oretnom23 Customer_Support_System

CVE-2023-49974 Customer Support System 1.0 - Cross-Site Scri...

PT-2023-31435

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at "/customer support/index.php?page=new...

PT-2023-31434

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at "/customer support/index.php?page=new ticket...

PT-2023-31428

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/customer support/index.php?page=edit customer" API endpoint. Recommendation...

CVE-2023-43944: Improper Neutralization of Input During Web Page Generation

A Stored Cross Site Scripting XSS vulnerability was found in SourceCodester Task Management System 1.0. It allows attackers to execute arbitrary code via parameter field in index.php?page=projectlist...