PT-2023-32641 · Unknown · Voovi Social Networking Script

Name of the Vulnerable Software and Affected Versions: Voovi Social Networking Script version 1.0 Description: A SQL injection vulnerability has been reported, affecting the editprofile.php endpoint in multiple parameters, such as username and password. This could allow a remote attacker to send ...

Voovi Security Breach

Voovi is an open source social networking script from Sourceforge. A security vulnerability exists in Voovi version 1.0, which stems from an SQL injection vulnerability in photos.php...

PT-2023-32647 · Unknown · Voovi Social Networking Script

Name of the Vulnerable Software and Affected Versions: Voovi Social Networking Script version 1.0 Description: A SQL injection vulnerability has been reported, affecting the signup2.php file through the emailadd parameter. This could allow a remote attacker to send a specially crafted SQL query t...

Delta Electronics InfraSuite Device Master Security Vulnerability

Delta Electronics InfraSuite Device Master is a device used to simplify and automate the monitoring of critical equipment from Delta Electronics Taiwan, China. A security vulnerability exists in Delta Electronics InfraSuite Device Master v.1.0.7 and prior versions that originated from a...

URL Shortener Cross-Site Scripting Vulnerability

URL Shortener is a simple web-based application developed by Carlo Montero Personal Developer using Python and Django frameworks. A cross-site scripting vulnerability exists in URL Shortener version 1.0. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...

Inventory Management System SQL Injection Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Free and Open Source Inventory Management System version 1.0, which stems from an incorrect manipulation of the columns parameter that can lead to sql injection...

PT-2023-32605 · Unknown · Sourcecodester Free/Open Source Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Free and Open Source Inventory Management System version 1.0 Description: A critical issue affects the processing of the file ample/app/ajax/suppliar data.php, where the manipulation of the columns argument leads to SQL...

PT-2023-32613 · Sourcecodester · Sourcecodester Url Shortener

Name of the Vulnerable Software and Affected Versions: SourceCodester URL Shortener version 1.0 Description: A vulnerability was found in the Long URL Handler component, which can be exploited to lead to cross site scripting. The attack can be launched remotely. Recommendations: For SourceCodeste...

WordPress Plugin UserPro Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

SUP Online Shopping Security Breach

SUP Online Shopping is an online shopping website. A security vulnerability exists in SUP Online Shopping version v.1.0, which stems from a cross-site scripting XSS vulnerability. The vulnerability can be exploited by an attacker to execute arbitrary code via parameters such as Name in the Regist...

CVE-2023-48078

SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' parameter...

Malicious code in discord-web-stream.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34fa39c7559a1834d28c5b1e0b3470965c15470b60f2f9c1a196a823e394a49f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Simple CRUD Functionality Security Vulnerability

Simple CRUD Functionality is a web application. A security vulnerability exists in code-projects Simple CRUD Functionality v1.0, which stems from an SQL injection vulnerability that allows attackers to run arbitrary SQL commands via the title parameter...

Exploit for Cross-Site Request Forgery (CSRF) in Remyandrade Sticky_Notes_App

CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1...

Online Job Portal SQL Injection Vulnerability

Online Job Portal is an online job portal for janobe individual developers. A SQL injection vulnerability exists in Online Job Portal v1.0 where certain parameters are not validated or escaped before they are used in a stitched SQL statement...

Online Matrimonial Project SQL Injection Vulnerability

Online Matrimonial Project is an online matrimonial program. A SQL injection vulnerability exists in Online Matrimonial Project v1.0 where certain parameters are not validated or escaped before they are used in a stitched SQL statement...

ZOHO ManageEngine Desktop Central Injection Vulnerability

ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. An injection...

CVE-2023-45345

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'deleted' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

Simple Student Information System Cross-Site Scripting Vulnerability

Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can help a university or college to manage student information and academic records. A cross-site scripting vulnerability exists in Campcodes Simple Student Information System versi...

Online Food Ordering System SQL Injection Vulnerability

Online Food Ordering System is an online food ordering system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which is caused by insufficient filtering of the id parameter on the routers/add-ticket.php page...