WordPress PB MailCrypt plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin PB MailCrypt versions = 3.1.0...

WordPress Instant Images plugin <= 6.1.0 - Arbitrary Option Update to Privilege Escalation vulnerability

Arbitrary Option Update to Privilege Escalation vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Instant Images versions = 6.1.0...

ED01-CMS 安全漏洞

ED01-CMS is a CMS project in a Udemy course. A security vulnerability exists in ED01-CMS version v.1.0, which stems from a cross-site scripting XSS vulnerability in the categories.php component...

Simple Subscription Website SQL注入漏洞

Simple Subscription Website is an open source, web-based simple subscription application by Carlo Montero Personal Developer. It is used to provide companies with possible members to apply for plans that offer certain services. A SQL injection vulnerability exists in Simple Subscription Website...

BoidCMS 安全漏洞

BoidCMS is a free open source flat file CMS for building simple websites and blogs, developed in PHP and using JSON as the database. A security vulnerability exists in BoidCMS version v2.1.0, which stems from the presence of a cross-site scripting XSS vulnerability that allows an attacker to...

PT-2024-23703 · Unknown · Phpgurukul Cyber Cafe Management System

Name of the Vulnerable Software and Affected Versions: phpgurukul Cyber Cafe Management System Using PHP & MySQL version 1.0 Description: The issue allows attackers to run arbitrary SQL commands via the editid variable in the "/edit-computer-detail.php" API endpoint. This enables attackers to...

CVE-2024-32343

A cross-site scripting XSS vulnerability in the Create Page of Boid CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Content parameter...

PT-2024-24187 · Shibang Communications · Shibang Communications Co.

Name of the Vulnerable Software and Affected Versions: Shibang Communications Co., Ltd. IP network intercom broadcasting system version 1.0 Description: The issue allows a local attacker to execute arbitrary code via the my parser.php component. This is a result of a File Upload vulnerability in...

CVE-2024-31649

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

Cosmetics and Beauty Product Online Store 安全漏洞

Cosmetics And Beauty Product Online Store is an online store for cosmetics and beauty products from the individual developer Carlo Montero. A security vulnerability exists in Cosmetics and Beauty Product Online Store v1.0, which originates from a cross-site scripting vulnerability in the Product...

Cosmetics and Beauty Product Online Store 安全漏洞

Cosmetics And Beauty Product Online Store is an online store for cosmetics and beauty products by Carlo Montero, an individual developer. A security vulnerability exists in Cosmetics and Beauty Product Online Store v1.0, which originates from a cross-site scripting vulnerability in the Last Name...

Cosmetics and Beauty Product Online Store 安全漏洞

Cosmetics And Beauty Product Online Store is an online store for cosmetics and beauty products by Carlo Montero, an individual developer. A security vulnerability exists in Cosmetics and Beauty Product Online Store v1.0, which originates from a cross-site scripting vulnerability in the Search...

Warehouse Management System 跨站脚本漏洞

Warehouse Management System is a warehouse management system developed by Carlo Montero. A cross-site scripting vulnerability exists in Warehouse Management System version 1.0, which stems from the parameter adminuser/adminnama/adminalamat/admintelepon in the file pengguna.php, which can lead to...

CVE-2024-31298

Insertion of Sensitive Information into Log File vulnerability in Joel Hardi User Spam Remover.This issue affects User Spam Remover: from n/a through 1.0...

Warehouse Management System 跨站脚本漏洞

Warehouse Management System is a Warehouse Management System developed by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in SourceCodester Warehouse Management System version 1.0, which originates from an unknown function in barang.php that leads to cross-site...

PT-2024-26440 · Unknown · Campcodes Church Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Church Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file login.php. The manipulation of the password argument leads to sql injection. The attac...

PT-2024-26479 · Unknown · Campcodes Church Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Church Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /admin/add sundaysch.php. The manipulation of the Gender argument leads to sql...

PT-2024-26384

Name of the Vulnerable Software and Affected Versions Campcodes Online Event Management System version 1.0 Description A critical issue has been discovered, affecting the /api/process.php file. The manipulation of the userId argument leads to sql injection, allowing remote attacks. The issue has...

PT-2024-26427 · Unknown · Campcodes Complete Online Student Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Online Student Management System version 1.0 Description: A vulnerability was found in the processing of the file courses view.php, where the manipulation of the argument FirstRecord leads to cross-site scripting. The attac...

PT-2024-25883 · Sourcecodester · Sourcecodester Prison Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Prison Management System version 1.0 Description: A problematic vulnerability was found in the SourceCodester Prison Management System. This issue affects the file /Employee/apply leave.php, where the manipulation of the txtsta...