CVE-2023-43702

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "trackingnumber" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-38971

Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the rack number parameter in the add new rack function...

PT-2023-26711 · Badaso · Badaso

Name of the Vulnerable Software and Affected Versions: Badaso versions 0.0.1 through 2.9.7 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the rack number parameter in the add new rack function. This enables the attacker to perform Cross Site...

CVE-2023-38971

Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the rack number parameter in the add new rack function...

CVE-2023-38971

Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the rack number parameter in the add new rack function...

Badaso 跨站脚本漏洞

Badaso is an open source Laravel Vue headless CMS from Uasoft. A security vulnerability exists in Badaso versions v.0.0.1 through v.2.9.7, which stems from a vulnerability that allows remote attackers to execute arbitrary code via a crafted payload on the rack number parameter in the add new rack...

Resort Reservation System 跨站脚本漏洞

Resort Reservation System is a Resort Reservation System by Carlo Montero Personal Developer. A cross-site scripting vulnerability exists in Resort Reservation System version 1.0, which stems from a problem with the file ?page=rooms, where manipulation of the parameter Cottage Numbe can lead to...

PT-2023-17363 · Unknown · Phpgurukul Bp Monitoring Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul BP Monitoring Management System version 1.0 Description: A critical issue has been found in the Password Recovery component, specifically in the file password-recovery.php. The manipulation of the emailid or contactno argument lead...

PT-2023-17331 · Unknown · Phpgurukul Bp Monitoring Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul BP Monitoring Management System version 1.0 Description: A critical issue was found in the User Profile Update Handler component, specifically in the file profile.php. The manipulation of the name and mobno arguments leads to SQL...

Computer Parts Sales and Inventory System SQL注入漏洞

Computer Parts Sales and Inventory System is a computer parts sales and inventory system by Warren Daloyan, an individual developer. SourceCodester Computer Parts Sales and Inventory System version 1.0 suffers from a SQL injection vulnerability that originates from a security issue in the file...

PT-2023-16788 · Sourcecodester · Sourcecodester Health Center Patient Record Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Health Center Patient Record Management System version 1.0 Description: A problematic vulnerability was found in the SourceCodester Health Center Patient Record Management System. This issue affects the file admin/fecalysis...

SourceCodester Computer Parts Sales and Inventory System 跨站脚本漏洞

Computer Parts Sales and Inventory System is a computer parts sales and inventory system by Warren Daloyan, an individual developer. A cross-site scripting vulnerability exists in SourceCodester Computer Parts Sales and Inventory System version 1.0, which stems from unknown problematic code in th...

SUSE CVE-2013-5002

Cross-site scripting XSS vulnerability in libraries/schema/ExportRelationSchema.class.php in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted pageNumber value to schemaexport.php...

CVE-2022-44897

A cross-site scripting XSS vulnerability in ApolloTheme AP PageBuilder component through 2.4.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the shownumber parameter...

PT-2023-14567 · Apollotheme · Wp Page Builder

Name of the Vulnerable Software and Affected Versions: ApolloTheme AP PageBuilder versions through 2.4.4 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the show number parameter. Recommendations: For...

PT-2023-12632 · Sourcecodester · Sourcecodester Royale Event Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Royale Event Management System version 1.0 Description: A problematic issue has been found in the system, affecting an unknown function of the file /royal event/companyprofile.php. The manipulation of the companyname, regno,...

PT-2022-23626 · Unknown · Webvendome

Name of the Vulnerable Software and Affected Versions: webvendome affected versions not specified Description: The issue is related to SQL Injection in the DocNumber parameter. It can be exploited through a GET request to the /webvendome/showfiles.aspx endpoint with a specially crafted DocNumber...

CVE-2022-37794

In Library Management System 1.0 the /card/in-card.php file idno parameters are vulnerable to SQL injection...

Library Management System SQL注入漏洞

Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in Library Management System v1.0, which was discovered to contain an SQL injection vulnerability via the...

PT-2022-18165 · Sourcecodester · Sourcecodester Simple E-Learning System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple E-Learning System affected versions not specified Description: A critical issue affects some unknown functionality of the file /claire blake. The manipulation of the phoneNumber argument leads to SQL injection. The attac...