210 matches found
CVE-2023-38971
Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the rack number parameter in the add new rack function...
CVE-2023-38971
Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the rack number parameter in the add new rack function...
Resort Reservation System 跨站脚本漏洞
Resort Reservation System is a Resort Reservation System by Carlo Montero Personal Developer. A cross-site scripting vulnerability exists in Resort Reservation System version 1.0, which stems from a problem with the file ?page=rooms, where manipulation of the parameter Cottage Numbe can lead to...
PT-2023-17363 · Unknown · Phpgurukul Bp Monitoring Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul BP Monitoring Management System version 1.0 Description: A critical issue has been found in the Password Recovery component, specifically in the file password-recovery.php. The manipulation of the emailid or contactno argument lead...
PT-2023-17331 · Unknown · Phpgurukul Bp Monitoring Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul BP Monitoring Management System version 1.0 Description: A critical issue was found in the User Profile Update Handler component, specifically in the file profile.php. The manipulation of the name and mobno arguments leads to SQL...
Computer Parts Sales and Inventory System SQL注入漏洞
Computer Parts Sales and Inventory System is a computer parts sales and inventory system by Warren Daloyan, an individual developer. SourceCodester Computer Parts Sales and Inventory System version 1.0 suffers from a SQL injection vulnerability that originates from a security issue in the file...
PT-2023-16788 · Sourcecodester · Sourcecodester Health Center Patient Record Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Health Center Patient Record Management System version 1.0 Description: A problematic vulnerability was found in the SourceCodester Health Center Patient Record Management System. This issue affects the file admin/fecalysis...
SourceCodester Computer Parts Sales and Inventory System 跨站脚本漏洞
Computer Parts Sales and Inventory System is a computer parts sales and inventory system by Warren Daloyan, an individual developer. A cross-site scripting vulnerability exists in SourceCodester Computer Parts Sales and Inventory System version 1.0, which stems from unknown problematic code in th...
SUSE CVE-2013-5002
Cross-site scripting XSS vulnerability in libraries/schema/ExportRelationSchema.class.php in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted pageNumber value to schemaexport.php...
CVE-2022-44897
A cross-site scripting XSS vulnerability in ApolloTheme AP PageBuilder component through 2.4.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the shownumber parameter...
PT-2023-14567 · Apollotheme · Wp Page Builder
Name of the Vulnerable Software and Affected Versions: ApolloTheme AP PageBuilder versions through 2.4.4 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the show number parameter. Recommendations: For...
PT-2023-12632 · Sourcecodester · Sourcecodester Royale Event Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Royale Event Management System version 1.0 Description: A problematic issue has been found in the system, affecting an unknown function of the file /royal event/companyprofile.php. The manipulation of the companyname, regno,...
PT-2022-23626 · Unknown · Webvendome
Name of the Vulnerable Software and Affected Versions: webvendome affected versions not specified Description: The issue is related to SQL Injection in the DocNumber parameter. It can be exploited through a GET request to the /webvendome/showfiles.aspx endpoint with a specially crafted DocNumber...
CVE-2022-37794
In Library Management System 1.0 the /card/in-card.php file idno parameters are vulnerable to SQL injection...
Library Management System SQL注入漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in Library Management System v1.0, which was discovered to contain an SQL injection vulnerability via the...
PT-2022-18165 · Sourcecodester · Sourcecodester Simple E-Learning System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple E-Learning System affected versions not specified Description: A critical issue affects some unknown functionality of the file /claire blake. The manipulation of the phoneNumber argument leads to SQL injection. The attac...
CVE-2022-1436
The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitise and escape the wpcargotrackingnumber parameter before outputting it back in the page, which could allow attackers to perform reflected Cross-Site Scripting attacks...
CVE-2022-1436
The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitise and escape the wpcargotrackingnumber parameter before outputting it back in the page, which could allow attackers to perform reflected Cross-Site Scripting attacks...