Lucene search
K

6 matches found

CNVD
CNVD
added 2025/11/20 12:0 a.m.1 views

Online Voting System /index.php File Code Problem Vulnerability

Online Voting System is an online voting system. Online Voting System has a code issue vulnerability that stems from a lack of validation of uploaded files in the page parameter of file /index.php. An attacker can exploit this vulnerability to upload malicious files...

8.8CVSS7.3AI score0.00043EPSS
Exploits1References1
OSV
OSV
added 2024/10/15 9:15 a.m.0 views

CVE-2024-9983

Enterprise Cloud Database from Ragic does not properly validate a specific page parameter, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files...

7.5CVSS5.9AI score0.00738EPSS
Exploits0References2
OSV
OSV
added 2024/10/14 4:15 a.m.0 views

CVE-2024-9923

The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with administrator privileges to move arbitrary system files to the website root directory and access them...

4.9CVSS5.9AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/10/13 12:0 a.m.3 views

PT-2024-39937 · Teamplus Technology · Team+

Name of the Vulnerable Software and Affected Versions: Team+ versions affected versions not specified Description: The issue is related to the improper validation of a specific page parameter in Team+ by TEAMPLUS TECHNOLOGY, allowing unauthenticated remote attackers to read arbitrary system files...

7.5CVSS7.2AI score0.00318EPSS
Exploits0References11
OSV
OSV
added 2024/08/30 3:15 a.m.0 views

CVE-2024-8328

Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with regular privilege to inject arbitrary JavaScript code and perform Reflected Cross-site scripting attacks...

5.4CVSS6AI score0.00399EPSS
Exploits0References2
OSV
OSV
added 2024/08/14 7:15 a.m.0 views

CVE-2024-7732

Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents...

9.8CVSS5.9AI score
Exploits0References2
Rows per page
Query Builder