CVE-2022-48178: Improper Neutralization of Input During Web Page Generation

X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the Create Action function, aka an index.php/actions/update URI...

CVE-2022-48178

X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the Create Action function, aka an index.php/actions/update URI...

CVE-2023-2100: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Vehicle Service Management System 1.0. This vulnerability affects unknown code of the file /admin/report/index.php. The manipulation of the argument dateend leads to cross site scripting. The attack can be initiated remotely. T...

CVE-2023-29597

bloofox v0.5.2 was discovered to contain a SQL injection vulnerability via the component /index.php?mode=content&page=pages&action=edit&eid=1...

CVE-2023-29598

lmxcms v1.4.1 was discovered to contain a SQL injection vulnerability via the setbook parameter at index.php...

CVE-2023-29598

lmxcms v1.4.1 was discovered to contain a SQL injection vulnerability via the setbook parameter at index.php...

CVE-2023-29597

bloofox v0.5.2 was discovered to contain a SQL injection vulnerability via the component /index.php?mode=content&page=pages&action=edit&eid=1...

Sql injection

lmxcms v1.4.1 was discovered to contain a SQL injection vulnerability via the setbook parameter at index.php...

CVE-2023-29597

bloofox v0.5.2 was discovered to contain a SQL injection vulnerability via the component /index.php?mode=content&page=pages&action=edit&eid=1...

CVE-2023-29598

lmxcms v1.4.1 was discovered to contain a SQL injection vulnerability via the setbook parameter at index.php...

CVE-2023-29597: Improper Neutralization of Special Elements used in an SQL Command

bloofox v0.5.2 was discovered to contain a SQL injection vulnerability via the component /index.php?mode=content&page=pages&action=edit&eid=1...

CVE-2023-29598: Improper Neutralization of Special Elements used in an SQL Command

lmxcms v1.4.1 was discovered to contain a SQL injection vulnerability via the setbook parameter at index.php...

PT-2023-22329 · Lmxcms · Lmxcms

Name of the Vulnerable Software and Affected Versions: lmxcms version 1.4.1 Description: The issue is a SQL injection vulnerability. It can be exploited via the setbook parameter at the "index.php" endpoint. Recommendations: For lmxcms version 1.4.1, consider restricting access to the setbook...

CVE-2023-29597

bloofox v0.5.2 was discovered to contain a SQL injection vulnerability via the component /index.php?mode=content&page=pages&action=edit&eid=1...

CVE-2023-26847

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state parameter at opencats/index.php?m=candidates...

CVE-2023-26846

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city parameter at opencats/index.php?m=candidates...

CVE-2023-26847: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state parameter at opencats/index.php?m=candidates...

CVE-2023-26846: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city parameter at opencats/index.php?m=candidates...

PT-2023-20822

Name of the Vulnerable Software and Affected Versions OpenCATS version 0.9.7 Description A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state parameter at "opencats/index.php?m=candidates". This enables...

CVE-2023-26847

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state parameter at opencats/index.php?m=candidates...