1126 matches found
PT-2023-17229 · Unknown · Sourcecodester Grade Point Average Gpa Calculator
Name of the Vulnerable Software and Affected Versions: SourceCodester Grade Point Average GPA Calculator version 1.0 Description: A problematic issue was found in the software, affecting an unknown function of the file index.php. The manipulation of the page argument with the input...
PT-2023-17208 · Unknown · Sourcecodester Grade Point Average Gpa Calculator
Name of the Vulnerable Software and Affected Versions: SourceCodester Grade Point Average GPA Calculator version 1.0 Description: A problematic vulnerability has been found in the software, affecting an unknown part of the file index.php. The manipulation of the page argument leads to cross-site...
CVE-2023-0681
Rapid7 InsightVM versions 6.6.178 and lower suffers from an open redirect vulnerability, whereby an attacker has the ability to redirect the user to a site of the attacker’s choice using the ‘page’ parameter of the ‘data/console/redirect’ component of the application. This issue was resolved in t...
CVE-2023-27211
A cross-site scripting XSS vulnerability in /admin/navbar.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter...
CVE-2023-27211
A cross-site scripting XSS vulnerability in /admin/navbar.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter...
CVE-2023-27206
A cross-site scripting XSS vulnerability in /kruxton/navbar.php of Best POS Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter...
CVE-2023-27206
A cross-site scripting XSS vulnerability in /kruxton/navbar.php of Best POS Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter...
SUSE CVE-2006-0806
Multiple cross-site scripting XSS vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via 1 the nextpage parameter in adodb-pager.inc.php and 2 other unspecified vectors related to PHPSELF...
SUSE CVE-2008-6590
Multiple directory traversal vulnerabilities in LightNEasy "no database" aka flat version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to read arbitrary files via a .. dot dot in the page parameter to 1 index.php and 2 LightNEasy.php...
SUSE CVE-2011-3598
Multiple cross-site scripting XSS vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 a web page title, related to classes/Misc.php; or the 2 returnurl or 3 returndesc parameter to display.php...
SUSE CVE-2015-0899
The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter...
Online Food Ordering System index.php Cross-Site Scripting Vulnerability
Online Food Ordering System is an online food ordering system. A cross-site scripting vulnerability exists in Online Food Ordering System, which is caused by a lack of effective filtering and escaping of user-supplied data in the page parameter of index.php page, which can be exploited by attacke...
Online Food Ordering System navbar.php Cross-Site Scripting Vulnerability
Online Food Ordering System is an online food ordering system. A cross-site scripting vulnerability exists in Online Food Ordering System, which is caused by the lack of effective filtering and escaping of user-supplied data in the page parameter of navbar.php page, which can be exploited to caus...
CVE-2023-24202
Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php...
CVE-2023-24195
Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in index.php...
CVE-2023-24194
Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in navbar.php...
PT-2023-19470 · Unknown · Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version v2 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via the page parameter in the "index.php" endpoint. Recommendations: For Online Food...
PT-2023-19469 · Unknown · Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version v2 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is present in the page parameter in the navbar.php file. Cross-site scripting XSS is a type of security...
The vulnerability of D-Link DAP-2020 and DAP-1360 wireless access points’ microprogramming software is related to buffer overflow attacks on the stack. This allows attackers to execute arbitrary code.
The vulnerability of the microprogrammed software of D-Link’s DAP-2020 and DAP-1360 wireless access points is related to buffer overflow when processing the var:page parameter of the webproc module. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...