3326 matches found
CVE-2023-43744
An OS command injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an administrator to execute arbitrary OS commands via a file name parameter in a patch application function. The Zult...
CVE-2023-48839
Appointment Scheduler 3.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS issues via the name, pluginsmsapikey, pluginsmscountrycode, calendarid, title, country name, or customername parameter...
CVE-2023-48836
Car Rental Script 3.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS issues via the name, pluginsmsapikey, pluginsmscountrycode, calendarid, title, country name, or customername parameter...
CVE-2023-48828
Time Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS issues via the name, pluginsmsapikey, pluginsmscountrycode, calendarid, title, country name, or customername parameter...
CVE-2023-48828
Time Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS issues via the name, pluginsmsapikey, pluginsmscountrycode, calendarid, title, country name, or customername parameter...
Input validation
Time Slots Booking Calendar 4.0 is vulnerable to Multiple HTML Injection issues via the name, pluginsmsapikey, pluginsmscountrycode, calendarid, title, country name, or customername parameter...
CVE-2023-48172
A Cross Site Scripting XSS vulnerability in Shuttle Booking Software 2.0 allows a remote attacker to inject JavaScript via the name, description, title, or address parameter to index.php...
CVE-2023-48836
Car Rental Script 3.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS issues via the name, pluginsmsapikey, pluginsmscountrycode, calendarid, title, country name, or customername parameter...
Time Slots Booking Calendar Security Breach
PHPJabbers Time Slots Booking Calendar is a booking system from the Serbian company PHPJabbers. A security vulnerability exists in Time Slots Booking Calendar version 4.0, which stems from an HTML injection vulnerability in several parameters, including name...
Time Slots Booking Calendar Security Breach
PHPJabbers Time Slots Booking Calendar is a booking system from the Serbian company PHPJabbers. A security vulnerability exists in Time Slots Booking Calendar version 4.0, which stems from a stored cross-site scripting XSS vulnerability in several parameters, including name...
Car Rental Script Security Vulnerability
Car Rental Script is a vehicle rental script of GZ Script open source . Car Rental Script v3.0 version has a security vulnerability , the vulnerability stems from name and other parameters have stored cross-site scripting XSS vulnerability...
SourceCodester User Registration and Login System Cross-Site Scripting Vulnerability
User Registration and Login System is a user registration and login system by Remy Andrade, an individual developer. A cross-site scripting vulnerability exists in the SourceCodester User Registration and Login System, which originates from cross-site scripting in the firstname parameter of...
CVE-2023-49047
Tenda AX1803 v1.0.0.1 contains a stack overflow via the devName parameter in the function formSetDeviceName...
PT-2023-30099 · Unknown · Inventory Management
Name of the Vulnerable Software and Affected Versions: Inventory Management version 1.0 Description: The issue allows a local attacker to execute arbitrary code via the name, uname, and email parameters in the "registration.php" component. This is a SQL injection vulnerability. Recommendations: F...
PT-2023-30224 · Unknown · Online Matrimonial Project
Name of the Vulnerable Software and Affected Versions: Online Matrimonial Project version 1.0 Description: The issue concerns Unauthenticated SQL Injection vulnerabilities. Specifically, the name parameter in the register function of the functions.php file is vulnerable. Recommendations: For Onli...
MyBB Security Vulnerabilities
MyBB MyBulletinBoard is a free and web-based forum software developed by MYBB team using PHP and MySQL. The software is easy to use , support for multiple languages , scalable and so on. A security vulnerability exists in MyBB Forums version v.1.8.33. An attacker can exploit this vulnerability to...
Magnesium-PHP Injection Vulnerability
Magnesium-PHP is a wrapper for the Mailguns PHP API client. An injection vulnerability exists in Magnesium-PHP version 0.3.0 and earlier, which stems from the fact that incorrect manipulation of the parameter eemail/name can lead to injection...
CVE-2023-46954
SQL Injection vulnerability in Relativity ODA LLC RelativityOne v.12.1.537.3 Patch 2 and earlier allows a remote attacker to execute arbitrary code via the name parameter...