1126 matches found
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the pagination feature used in searches and filters by injecting a malformed URL into the GET parameter perpage Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker...
CVE-2024-39210
Best House Rental Management System v1.0 was discovered to contain an arbitrary file read vulnerability via the Page parameter at index.php. This vulnerability allows attackers to read arbitrary PHP files and access other sensitive information within the application...
PT-2024-28391 · Unknown · Best House Rental Management System
Name of the Vulnerable Software and Affected Versions: Best House Rental Management System version 1.0 Description: The issue allows attackers to read arbitrary PHP files and access other sensitive information within the application through the Page parameter at "index.php". This is an arbitrary...
CVE-2024-39210
CVE-2024-39210 applies to Best House Rental Management System v1.0. The vulnerability is an arbitrary file read via the Page parameter in index.php, allowing an attacker to read arbitrary PHP files and access other sensitive information within the application. Exploitability details across source...
Parsec Automation TrakSYS Security Vulnerability
Parsec Automation TrakSYS is an MES solution from Parsec Automation, USA. A security vulnerability exists in Parsec Automation TrakSYS version 11.x.x, which stems from the parameter ID of the file TS/export/contentpage leading to a direct request...
Hangzhou Meisoft Information Technology FineSoft Cross-Site Scripting Vulnerability
Hangzhou Meisoft Information Technology Finesoft is a pharmaceutical management software from Hangzhou Meisoft Information China. A cross-site scripting vulnerability exists in Hangzhou Meisoft Information Technology FineSoft v.8.0 and earlier versions, which can be exploited to allow a remote...
CVE-2024-37671
Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the page parameter...
CVE-2024-37671
Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the page parameter...
Tessi Docubase Document Management Security Vulnerability
Tessi Docubase Document Management is a document management and process automation software from Tessi. A security vulnerability exists in Tessi Docubase Document Management version 5.x. A remote attacker could exploit the vulnerability to execute arbitrary code via the page parameter...
CVE-2024-37671
CVE-2024-37671 affects Tessi Docubase Document Management 5.x. A Cross Site Scripting (XSS) flaw exists in the page parameter that could allow a remote attacker to execute arbitrary code. This is documented in multiple sources (NVD/Red Hat/CNNVD/CVE listings), but the connected EU/NVD/RH/CNNVD en...
CVE-2024-37671
Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the page parameter...
Online Student Enrollment System SQL注入漏洞
Online Student Enrollment System is an online student enrollment system by Lyndon Bermoy, an individual developer. Online Student Enrollment System version 1.0 suffers from a SQL injection vulnerability that can be exploited by an attacker to view, add, modify, or delete information in the back-e...
Facebook News Feed Like SQL注入漏洞
Facebook News Feed Like is a Facebook-like application by oretnom23 Individual Developer. A SQL injection vulnerability exists in Facebook News Feed Like version 1.0, which stems from the fact that incorrect manipulation of the parameter page can lead to sql injection...
PT-2024-35945 · Sourcecodester · Sourcecodester Facebook News Feed Like
Name of the Vulnerable Software and Affected Versions: SourceCodester Facebook News Feed Like version 1.0 Description: A critical issue was found in the software, affecting the file index.php. The manipulation of the page argument leads to SQL injection. The attack can be initiated remotely...
The vulnerability of the fromDhcpListClient function (implemented in the microprogramming software for Tenda FH1206 routers) allows a attacker to trigger a service failure or execute arbitrary code.
The vulnerability of the fromDhcpListClient function implemented in the Tenda FH1206 router’s software is related to buffer overflows in the stack when processing the page parameter. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code by sending...
Simple Image Stack Website Cross-Site Scripting Vulnerability
Simple Image Stack Website is a simple image display website. A cross-site scripting vulnerability exists in version 1.0 of Simple Image Stack Website, which stems from an incorrect manipulation of the parameter page that can lead to cross-site scripting...
The vulnerability of the fromNatStaticSetting function in the microprogramming software for Tenda FH1206 allows a hacker to execute arbitrary code or cause service failures.
The vulnerability of the fromNatStaticSetting function in the microprogramming software for Tenda FH1206 is related to the execution of operations outside the buffer in memory when processing the page parameter ip/goform/NatStaticSetting. Exploiting this vulnerability allows a malicious actor to...
PT-2024-33356 · Sourcecodester · Sourcecodester Simple Image Stack Website
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Image Stack Website version 1.0 Description: A problematic issue was found in the software, affecting an unknown part. The manipulation of the page argument leads to cross-site scripting. It is possible to initiate the...
CVE-2024-4713
A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view/allteacher.php. The manipulation of the argument page leads to cross site scripting. The attack can be...