EUVD-2022-52388

Malicious code in bioql PyPI...

EUVD-2022-52389

Malicious code in bioql PyPI...

CVE-2022-30528

SQL Injection vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to execute arbitrary commands via the username parameter to /system/user/modules/modusers/controller.php...

CVE-2022-30529

File upload vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to upload arbitrary files via /system/application/libs/js/tinymce/plugins/filemanager/dialog.php and /system/application/libs/js/tinymce/plugins/filemanager/upload.php...

CVE-2022-28607

An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to gain sensitive information via the action parameter to /system/user/modules/modusers/controller.php...

CVE-2022-30528

SQL Injection vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to execute arbitrary commands via the username parameter to /system/user/modules/modusers/controller.php...

CVE-2022-30528

SQL Injection vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to execute arbitrary commands via the username parameter to /system/user/modules/modusers/controller.php...

CVE-2022-28607

An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to gain sensitive information via the action parameter to /system/user/modules/modusers/controller.php...

CVE-2022-28607

An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to gain sensitive information via the action parameter to /system/user/modules/modusers/controller.php...

Information disclosure

An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to gain sensitive information via the action parameter to /system/user/modules/modusers/controller.php...

ISIC 安全漏洞

ISIC is a web backend for asith-eranga individual developers. A security vulnerability exists in ISIC tour booking that stems from allowing an attacker to obtain sensitive information via the action parameter in /system/user/modules/modusers/controller.php...

PT-2022-19101 · Unknown · Asith-Eranga Isic Tour Booking

Name of the Vulnerable Software and Affected Versions: asith-eranga ISIC tour booking versions prior to the version published on Feb 13th 2018 Description: An issue in asith-eranga ISIC tour booking allows attackers to gain sensitive information via the action parameter to "/system/user/modules/m...

CVE-2022-30528

CVE-2022-30528 : A SQL injection exists in the asith-eranga ISIC tour booking application. The vulnerability affects the username parameter in /system/user/modules/mod_users/controller.php, allowing an attacker to execute arbitrary commands. It is documented with a high impact (C, I, A = HIGH) an...

CVE-2022-30528

SQL Injection vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to execute arbitrary commands via the username parameter to /system/user/modules/modusers/controller.php...

CVE-2022-30528

SQL Injection vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to execute arbitrary commands via the username parameter to /system/user/modules/modusers/controller.php...

CVE-2022-28607

An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to gain sensitive information via the action parameter to /system/user/modules/modusers/controller.php...

CVE-2022-28607

An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to gain sensitive information via the action parameter to /system/user/modules/modusers/controller.php...

ISIC SQL注入漏洞

ISIC is a website backend by asith-eranga individual developer. A security vulnerability exists in ISIC tour booking that stems from the presence of SQL injection, which allows attackers to execute arbitrary commands via the username parameter in /system/user/modules/modusers/controller.php...

CVE-2022-28607

CVE-2022-28607 concerns an information disclosure in the asith-eranga ISIC tour booking software. The issue arises in the endpoint "/system/user/modules/mod_users/controller.php" where an attacker can potentially obtain sensitive information through the action parameter. Affected software version...

asith-eranga ISIC Arbitrary File Upload Vulnerability

ISIC is a web backend for asith-eranga individual developers. An arbitrary file upload vulnerability exists in asith-eranga ISIC tour booking 2018.02.13 and earlier versions. The vulnerability stems from a lack of valid validation of uploaded files. An attacker can exploit the vulnerability to...