Froxlor 跨站请求伪造漏洞

Froxlor is a lightweight server management software from the Froxlor team. A cross-site request forgery vulnerability exists in Froxlor versions prior to 0.10.38. An attacker could exploit this vulnerability to perform cross-site request forgery attacks...

CVE-2022-2656

A vulnerability classified as critical has been found in SourceCodester Multi Language Hotel Management Software. Affected is an unknown function. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

Sql injection

A vulnerability classified as critical has been found in SourceCodester Multi Language Hotel Management Software. Affected is an unknown function. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2022-2656 SourceCodester Multi Language Hotel Management Software sql injection

A vulnerability classified as critical has been found in SourceCodester Multi Language Hotel Management Software. Affected is an unknown function. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2022-2656

CVE-2022-2656 affects SourceCodester Multi Language Hotel Management Software. Affects an unknown function where manipulating the email parameter triggers SQL injection, allowing remote exploitation. Multiple sources confirm a public exploit/disclosure; no patch/version details are provided in th...

CVE-2022-2648

A vulnerability was found in SourceCodester Multi Language Hotel Management Software. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument roomid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to...

CVE-2022-2648 SourceCodester Multi Language Hotel Management Software sql injection

A vulnerability was found in SourceCodester Multi Language Hotel Management Software. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument roomid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to...

CVE-2022-2648

CVE-2022-2648 affects SourceCodester Multi Language Hotel Management Software. The vulnerability is a SQL injection caused by manipulation of the argument room_id, enabling remote exploitation. Multiple connected sources confirm the issue and mention that the exploit has been disclosed publicly. ...

Multi Language Hotel Management Software SQL注入漏洞

Multi Language Hotel Management Software is a multilingual hotel management software by Nikhil B Individual Developer. Multi Language Hotel Management Software suffers from a SQL injection vulnerability that stems from affecting some unknown processing, where manipulation of the parameter roomid...

Multi Language Hotel Management Software SQL注入漏洞

Multi Language Hotel Management Software is a multilingual hotel management software by Nikhil B Individual Developer. Multi Language Hotel Management Software suffers from a SQL injection vulnerability that originates in an affected unknown function, where manipulation of the parameter email...

The vulnerability of the Net-SNMP software suite arises from insufficient validation of input data, allowing a perpetrator to trigger a service failure.

The vulnerability of the Net-SNMP software suite exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2022-2151 Best Contact Management Software <= 3.7.3 - Admin+ Stored Cross-Site Scripting

The Best Contact Management Software WordPress plugin through 3.7.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-2151

CVE-2022-2151 affects the WordPress plugin “Best Contact Management Software” up to version 3.7.3. The issue is a failure to sanitize/escape certain plugin settings, enabling stored cross-site scripting (XSS) by high-privilege users (e.g., admin) even when unfiltered_html is disallowed. The vulne...

SAP S/4HANA 和 SAP Business One 安全漏洞

SAP Business One is a product of SAP, a German company.SAP Business One is a set of enterprise management software. The software includes functions such as financial management, operations management and human resource management. SAP Business One has an information disclosure vulnerability that...

SAP Business One 代码问题漏洞

SAP Business One is a set of enterprise management software from SAP. The software includes functions such as financial management, operations management and human resource management. A denial-of-service vulnerability exists in SAP Business One version 10.0, which stems from improper input clean...

The vulnerability of the Eaton Intelligent Power Manager (IPM) software for monitoring and managing power supplies arises from the lack of protective measures for the website structure. This allows attackers to carry out XSS attacks.

The vulnerability of the Eaton Intelligent Power Manager IPM software for monitoring and managing power supplies is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a remote attacker to execute XSS attacks...

Net-SNMP 代码问题漏洞

Net-SNMP is an open source Simple Network Management Protocol SNMP software. The software is used to monitor network devices, computer devices, UPS devices, and more. A code issue vulnerability exists in Net-SNMP that stems from a misformatted OID in the SET of the nsVacmAccessTable that could...

CVE-2022-31068

CVE-2022-31068 affects GLPI installations that use the native inventory, where all such instances may leak sensitive information due to an unauthenticated access path. The issue is addressed in GLPI version 10.0.2; all affected users are advised to upgrade to 10.0.2 or newer. The provided documen...

Advantech iView

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Advantech Equipment: iView Vulnerabilities: SQL Injection, Missing Authentication for Critical Function, Relative Path Traversal, Command Injection 2. RISK EVALUATION Successful exploitation of these...

The vulnerability of software for managing Intel In-Band devices allows a perpetrator to bypass authentication processes and gain increased privileges.

The vulnerability of software for managing Intel In-Band devices is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain increased privileges...