CVE-2024-48707

Collabtive 3.1 is vulnerable to Cross-site scripting XSS via the name parameter under a action=add or action=edit within managemilestone.php file and b action=addpro within admin.php file...

CVE-2024-48708

CVE-2024-48708 affects Collabtive 3.1 with a Cross-Site Scripting (XSS) vulnerability that can be triggered via the name parameter in two pages: tasklist.php (action=add/edit) and admin.php (action=adduser/edituser). The connected Nessus/Red Hat/Ubuntu/etc. entries confirm the same description an...

The vulnerability of TP-Link WR941ND router’s microprogramming software, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of TP-Link WR941ND router’s microprogramming software lies in the fact that the operation exceeds the buffer limits in memory when processing the page /userRpm/popupSiteSurveyRpm.htm with the parameter ssid. Exploiting this vulnerability allows a remote attacker to compromise th...

Pharmacy Management System SQL注入漏洞

Pharmacy Management System MPMS is a multilingual pharmacy management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in Pharmacy Management System version 1.0, which originates from an SQL injection vulnerability contained in the name parameter of the...

CVE-2024-35520

Netgear R7000 1.0.11.136 is vulnerable to Command Injection in RMTinvite.cgi via devicename2 parameter...

NETGEAR R7000 安全漏洞

The NETGEAR R7000 is a wireless router from NETGEAR. The NETGEAR R7000 version 1.0.11.136 suffers from a command injection vulnerability that stems from the devicename2 parameter failing to correctly filter constructed command special characters, commands, and so on. An attacker could exploit thi...

CVE-2024-35517

Netgear XR1000 v1.0.0.64 is vulnerable to command injection in usbremotesmbconf.cgi via the sharename parameter...

NETGEAR XR1000 安全漏洞

The NETGEAR XR1000 is a dual-band Wi-Fi 6 router from NETGEAR designed for gaming. A security vulnerability exists in NETGEAR XR1000 version v1.0.0.64, which stems from vulnerability to command injection attacks with the sharename parameter. No details of the vulnerability are provided at this ti...

SUSE CVE-2024-46292

A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service DoS via a crafted input inserted into the name parameter. NOTE: this is disputed by the Supplier because it cannot be reproduced. Also, the product's documentation indicates that it is not guaranteed to be usab...

code-projects Blood Bank System SQL注入漏洞

Code-Projects Blood Bank System is a Code-Projects open source blood bank management system. A SQL injection vulnerability exists in code-projects Blood Bank System version 1.0, which originates from an SQL injection issue in the name parameter of the /update.php page...

Classroombookings 跨站脚本漏洞

Classroombookings is a Php, Mysql based school room booking system by Craig A Rodway, an individual developer. A cross-site scripting vulnerability exists in Classroombookings version 2.8.6 and earlier, which stems from the parameter Name in the file/rooms/fields of the component Room Page can le...

PT-2024-39862 · Unknown · Code-Projects Blood Bank System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank System version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /update.php. The manipulation of the name argument leads to SQL injection. It is possible to initiate the attack...

CVE-2024-46237

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting XSS via the patname, pataddress, and medhis parameters in doctor/add-patient.php and doctor/edit-patient.php...

CVE-2024-46409

A stored cross-site scripting XSS vulnerability in SeedDMS v6.0.28 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter in the Calendar page...

CVE-2024-46409

A stored cross-site scripting XSS vulnerability in SeedDMS v6.0.28 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter in the Calendar page...

SeedDMS 6.0.28 Cross Site Scripting

CVE-ID:CVE-2024-46409 --------------------------------------------------------------------- Suggested descriptionA stored cross-site scripting XSS vulnerability in SeedDMS v6.0.28 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter in...

CVE-2024-31835

Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to execute arbitrary code via a crafted payload to the file name parameter...

CVE-2024-31835

FlatPress v1.3 is affected by a cross-site scripting vulnerability in the file name parameter, allowing a remote attacker to execute arbitrary code. The OpenVAS entry confirms multiple vulnerabilities in FlatPress

PT-2024-24233 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: Flatpress version 1.3 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the file name parameter. This enables the attacker to perform Cross Site Scripting attacks. Recommendations: For Flatpres...

CVE-2024-31835

Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to execute arbitrary code via a crafted payload to the file name parameter...