945 matches found
CVE-2023-37070
Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting XSS...
Cross site scripting
Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting XSS...
CVE-2023-37070
Affected software: Code Projects Hospital Information System 1.0. The entry indicates a Cross Site Scripting (XSS) vulnerability in this system. The documents do not provide explicit root-cause details or affected components beyond the product/version, nor do they describe exploits or in-the-wild...
Hospital Information System Cross-Site Scripting Vulnerability
Hospital Information System is a hospital information management system organized by SourceCode and Projects. A security vulnerability exists in Code Projects Hospital Information System version 1.0 that stems from a cross-site scripting XSS vulnerability...
PT-2023-25784 · Unknown · Code Projects Hospital Information System
Name of the Vulnerable Software and Affected Versions: Code Projects Hospital Information System version 1.0 Description: The issue is related to Cross Site Scripting XSS, which is a type of security vulnerability that can be exploited by attackers to inject malicious scripts into websites. No...
CVE-2023-37070
Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting XSS...
CVE-2023-37070
Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting XSS...
CVE-2023-36159
CVE-2023-36159 affects sourcecodester Lost and Found Information System 1.0. It is a Cross Site Scripting (XSS) vulnerability exploitable via the First Name, Middle Name, and Last Name fields on the Create User page. Root cause: insufficient input validation/sanitization. Impact: remote attackers...
Precisely Spectrum Spatial Analyst 代码问题漏洞
Precisely Spectrum Spatial Analyst is a Geographic Information System GIS solution from Precisely, Inc. A security vulnerability exists in Precisely Spectrum Spatial Analyst version 20.01 that stems from vulnerability to directory traversal attacks...
Precisely Spectrum Spatial Analyst 路径遍历漏洞
Precisely Spectrum Spatial Analyst is a Geographic Information System GIS solution from Precisely, Inc. A security vulnerability exists in Precisely Spectrum Spatial Analyst version 20.01 that stems from vulnerability to directory traversal attacks...
CVE-2023-3850
A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=deletecategory of the component HTTP POST Request Handler. The manipulation of the argume...
CVE-2023-3850
The CVE-2023-3850 entry concerns SourceCodester Lost and Found Information System 1.0. A vulnerability exists in the HTTP POST handler, specifically the /classes/Master.php?f=delete_category endpoint, where manipulating the id parameter leads to SQL injection. Affected functionality is an unknown...
CVE-2023-3850 SourceCodester Lost and Found Information System HTTP POST Request sql injection
A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=deletecategory of the component HTTP POST Request Handler. The manipulation of the argume...
CVE-2023-3679
A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=saveinquiry of the component HTTP POST Request Handler. The manipulation of the argument id lead...
CVE-2023-3680
A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part of the file /classes/Master.php?f=saveitem of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. It is...
CVE-2023-3680
CVE-2023-3680 affects SourceCodester Lost and Found Information System 1.0. A SQL injection vulnerability exists in the HTTP POST Request Handler, specifically in /classes/Master.php?f=save_item via the id parameter. Exploitation could be remote and impact confidentiality, integrity, and availabi...
CVE-2023-3679
The CVE concerns SourceCodester Lost and Found Information System 1.0. Affected component: the HTTP POST Request Handler, specifically the file /classes/Master.php?f=save_inquiry. The vulnerability arises from manipulating the argument id, leading to SQL injection that can be triggered remotely. ...
Lost and Found Information System SQL注入漏洞
Lost and Found Information System is a lost and found information system by the individual developer of oretnom23. A SQL injection vulnerability exists in Lost and Found Information System version 1.0, which originates from the parameter id of the file /classes/Master.php?f=saveitem that can lead...
Lost and Found Information System v1.0 - SQL Injection
Exploit Title: Lost and Found Information System v1.0 - SQL Injection Date: 2023-06-30 country: Iran Exploit Author: Amirhossein Bahramizadeh Category : webapps Dork : /php-lfis/admin/?page=systeminfo/contactinformation Tested on: Windows/Linux CVE : CVE-2023-33592 import requests URL of the...