The vulnerability of the ReadyScript e-commerce management system, related to improper session management, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ReadyScript e-commerce management system is related to improper session management. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the ReadyScript e-commerce management system, related to the unlimited loading of dangerous type files, allows a hacker to upload any type of files.

The vulnerability of the ReadyScript e-commerce management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to load any desired files...

The vulnerability of the ReadyScript e-commerce management system lies in the improper implementation of the sequence of actions to be performed, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ReadyScript e-commerce management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

The vulnerability of the ReadyScript e-commerce management system, related to the unlimited loading of dangerous type files, allows a hacker to upload any type of files.

The vulnerability of the ReadyScript e-commerce management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to load any desired files...

The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Test IT testing system, related to insufficient validation of requests on the server side, allows a hacker to perform an SSRF attack.

The vulnerability of the Test IT testing management system is related to insufficient testing of server-side requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

CVE-2023-23279

Canteen Management System v1.0의 SQL 삽입 취약점. 버그 작성자: Tuannq 발견일: 2023년 5월 1일 벤더: https://www.sourcecodester.com/php/15688/canteen-management-system-project-source-code-php.html 로그인 계정: [email protected]/rootadmin 슈퍼 관리자 계정 취약점 파일: /phpaction/getOrderReport.php 취약점 위치:...

CVE-2022-30887

CVE-2022-30887 Pharmacy Management System 1.0 Shell Upload Это приложение создано Mayurik Проект системы управления аптекой на PHP был разработан для повышения точности и эффективности работы аптек за счет безопасности и управления. Короче говоря, это приложение для инвентаризации товаров. В...

CVE-2022-41445

CVE-2022-41445 Межсайтовый скриптинг в системе управления записями учителей с использованием CodeIgnitor Предполагаемое описание Уязвимость межсайтового скриптинга XSS в системе управления записями с использованием CodeIgniter 1.0 позволяет злоумышленникам выполнять произвольные веб-скрипты или...

CVE-2022-28078

CVE-2022-28077 주택 소유자 수금 관리 시스템 1.0 - 반사형 XSS 익스플로잇 제목: 주택 소유자 수금 관리 시스템 1.0 - 반사형 XSS 날짜: 2022-05-06 CVE: CVE-2022-28078 익스플로잇 작성자: Abdulaziz Saad @b4zb0z 공급업체 홈페이지: https://www.sourcecodester.com/ 소프트웨어 링크:...

CVE-2022-40471

CVE-2022-40471 Clinic's Patient Management System v 1.0의 무제한 파일 업로드 취약점을 통한 원격 코드 실행 기술 설명: Clinic's Patient Management System v 1.0의 원격 코드 실행 취약점으로 인해 공격자는 users.php의 프로필 사진 업로드 기능을 통해 임의의 PHP 웹쉘을 업로드할 수 있습니다. 영향을 받는 구성 요소 - 소스 코드 다음 소스 코드에서 개발자가 특정 확장자를 제한하지 않고 모든 미디어 파일을 직접 업로드하도록 허용하는 것을 볼 수...

CVE-2023-46451

CVE-2023-46451 제안된 설명 Sourcecodester Best courier management system v1.0은 change username 필드에서 XSS교차 사이트 스크립팅에 취약합니다. 추가 정보 YouTube에 동영상 POC를 업데이트했습니다: https://youtu.be/f8B3m5YfqI 취약점 유형 XSS교차 사이트 스크립팅 영향을 받는 제품 코드 베이스 오픈 소스 영향을 받는 구성 요소 change username 필드 공격 유형 원격 공격 벡터 username 필드에 XSS 페이로드 업로드...

CVE-2022-43144-Stored-XSS

CVE-2022-43144 : 저장형 XSS Description Canteen Management System v1.0의 교차 사이트 스크립팅XSS 취약점으로 인해 공격자가 조작된 페이로드를 통해 임의의 웹 스크립트 또는 HTML을 실행할 수 있습니다. Impact 공격자가 사용자의 세션을 가로채고 계정을 탈취할 수 있습니다. 이 취약점을 악용하려면 피해자는 XXS 페이로드가 저장된 페이지를 방문해야 합니다. Affected Application link...

Vehicle Service Management System - Stored Cross-Site Scripting

A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel. id: CVE-2021-46068 info: name: Vehicle Service Management System - Stored Cross-Site Scripting author: TenBird severity: medium description: | A Stored Cross...

Zoo Management System 1.0 - SQL Injection

Zoo Management System 1.0 contains a SQL injection vulnerability via the username parameter on the login page. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

Masa CMS - Authentication Bypass

Masa CMS 7.2, 7.3, and 7.4-beta are susceptible to authentication bypass in the Remember Me function. An attacker can bypass authentication via a crafted web request and thereby obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the...

School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting

School Dormitory Management System 1.0 contains an authenticated cross-site scripting vulnerability in admin/inc/navigation.php:126. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-base...

Academy Learning Management System <5.9.1 - Cross-Site Scripting

Academy Learning Management System before 5.9.1 contains a cross-site scripting vulnerability via the Search parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting

School Dormitory Management System 1.0 contains an authenticated cross-site scripting vulnerability via admin/inc/navigation.php:125. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-bas...

Masteriyo LMS <= 1.7.3 - Insecure Direct Object Reference

Authentication Bypass Using an Alternate Path or Channel vulnerability in Masteriyo Masteriyo - LMS. Unauth access to course progress.This issue affects Masteriyo - LMS: from n/a through 1.7.3. id: CVE-2024-33939 info: name: Masteriyo LMS = 1.7.3 - Insecure Direct Object Reference author:...