PT-2024-16263 · Unknown · Code-Projects Blood Bank Management System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank Management System version 1.0 Description: A problematic issue was found in the system, affecting some unknown functionality of the file /bloodrequest.php. The manipulation of the msg argument leads to cross-site...

ZTE MF296R 安全漏洞

The ZTE MF296R is a wireless router from ZTE Corporation ZTE of China. A security vulnerability exists in the ZTE MF296R that stems from insufficient validation of the length of SMS parameters, which could be exploited by an authenticated attacker to perform a denial of service attack...

Perfex CRM 跨站脚本漏洞

Perfex CRM is a customer relationship management software from Perfex CRM open source. It is used to manage customers, projects and create invoices in the cloud. A cross-site scripting vulnerability exists in Perfex CRM version 3.1.6, which stems from the parameter message in the file...

PT-2024-39285 · Unknown · Perfex Crm

Name of the Vulnerable Software and Affected Versions: Perfex CRM version 3.1.6 Description: A problem exists in the file application/controllers/Clients.php of the component Parameter Handler. The manipulation of the message argument leads to cross-site scripting. The attack can be initiated...

PT-2024-39092 · Sourcecodester · Sourcecodester Clinics Patient Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Clinics Patient Management System version 2.0 Description: A problem was found in the processing of the file /users.php, where the manipulation of the message argument leads to cross-site scripting. The attack may be initiated...

SourceCodester Clinics Patient Management System 安全漏洞

SourceCodester Clinics Patient Management System is a clinic patient management system from SourceCodester, Inc. A security vulnerability exists in SourceCodester Clinics Patient Management System version 2.0, which stems from the parameter message in the file /users.php that can lead to cross-si...

Yoga Class Registration System 跨站脚本漏洞

Yoga Class Registration System is a yoga class registration system by Carlo Montero, a personal developer. A cross-site scripting vulnerability exists in version 1.0 of the Yoga Class Registration System, which stems from some unknown handling of the file /admin/inquiries/viewinquiry.php, where...

PT-2024-38629 · Sourcecodester · Sourcecodester Yoga Class Registration System

Name of the Vulnerable Software and Affected Versions: SourceCodester Yoga Class Registration System version 1.0 Description: A vulnerability was found in the system, classified as problematic, affecting some unknown processing of the file /admin/inquiries/view inquiry.php. The manipulation of th...

PHPGurukul Old Age Home Management System 安全漏洞

PHPGurukul Old Age Home Management System is a nursing home management system from PHPGurukul, Inc. A security vulnerability exists in version v1.0 of the PHPGurukul Old Age Home Management System, which stems from a stored cross-site scripting XSS vulnerability in the message parameter of the...

Devlop ID4Portais 安全漏洞

Devlop ID4Portais is an application from Devlop USA. A security vulnerability exists in versions prior to Devlop ID4Portais V.2022.837.002a, which stems from an HTML injection vulnerability due to an uncleaned message parameter being returned in a response...

CVE-2023-40819

ID4Portais contains an HTML Injection vulnerability in versions prior to V.2022.837.002a, caused by the response returning an unsanitized message parameter. Affected product: ID4Portais. Root cause: unsanitized message parameter leading to HTML injection. Impact details are described across sourc...

Tailoring Management System SQL Injection Vulnerability

Tailoring Management System is a tailoring management system from itsourcecode open source. A SQL injection vulnerability exists in itsourcecode Tailoring Management System version 1.0, which stems from the parameter title/msg in the file templateadd.php that can lead to SQL injection...

CVE-2024-6427

Uncontrolled Resource Consumption vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can use the "message" parameter to inject a payload with dangerous JavaScript code, causing the application to loop requests on itself, which could lead to resource consumption and...

Ingenico Estate Manager Cross-Site Scripting Vulnerability

Ingenico Estate Manager is a real estate management software from Ingenico Japan. A cross-site scripting vulnerability exists in Ingenico Estate Manager version 2023, which stems from cross-site scripting due to misuse of the parameter message...

PT-2024-37353 · Ingenico · Ingenico Estate Manager

Name of the Vulnerable Software and Affected Versions: Ingenico Estate Manager version 2023 Description: A problematic issue has been found in the News Feed component, affecting the processing of the file /emgui/rest/ums/messages. The manipulation of the message argument leads to cross-site...

playSMS Security Vulnerabilities

playSMS is an open source SMS Short Message Service management software from Anton Raharja, an individual developer in India. A security vulnerability exists in playSMS 1.4.7 and earlier versions, which stems from the fact that manipulation of the parameters name/message can lead to basic...

CVE-2024-3469

The GP Premium plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the message parameter in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...

VulnCheck KEV: CVE-2024-3469

The GP Premium plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the message parameter in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

PT-2024-26109

Name of the Vulnerable Software and Affected Versions GP Premium plugin for WordPress versions up to, and including, 2.4.0 Description The issue is related to Reflected Cross-Site Scripting via the message parameter due to insufficient input sanitization and output escaping. This allows...

PT-2024-26143 · WordPress · Header Footer Code Manager

Name of the Vulnerable Software and Affected Versions: Header Footer Code Manager Pro plugin for WordPress versions up to, and including, 1.0.16 Description: The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping, allowing unauthenticated...