Online Pizza Ordering System SQL注入漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in Online Pizza Ordering System version 1.0, which is caused by an incorrect manipulation of a parameter ID that results in an sql injection...

CVE-2023-23460

Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass...

CVE-2023-23460

Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass...

Authentication flaw

Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass...

CVE-2023-23460 Priority Web – Authentication bypass

Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass...

CVE-2023-23460

Priority Web version 19.1.0.68 is affected by a vulnerability described as parameter manipulation on an unspecified endpoint that may lead to authentication bypass. The CVSS v3.1 base score is 9.8 (CRITICAL), with network attack vector, low attack complexity, and privileges required: NONE. The im...

PT-2023-18969

Name of the Vulnerable Software and Affected Versions Priority Web version 19.1.0.68 Description The issue allows authentication bypass through parameter manipulation on an unspecified endpoint. Recommendations For Priority Web version 19.1.0.68, consider restricting access to unspecified endpoin...

CVE-2023-23460: Improper Authentication

Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass...

CVE-2023-23460 Priority Web – Authentication bypass

Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass...

CVE-2023-24689

An issue in Mojoportal v2.7.0.0 and below allows an authenticated attacker to list all css files inside the root path of the webserver via manipulation of the "s" parameter in /DesignTools/ManageSkin.aspx...

WebFinance SQL注入漏洞

WebFinance is a web application for managing invoices and handling customer contacts. A SQL injection vulnerability exists in WebFinance version 0.5, which stems from a problem with the unknown code in the file htdocs/admin/saveContractSignerRole.php, where manipulation of the parameters n/v can...

Canteen Management System 跨站脚本漏洞

Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. A cross-site scripting vulnerability exists in Canteen Management System version 1.0, which stems from the fact that incorrect manipulation of the parameter name can lead to cross-site scripting...

SQL Database Error could lead to SQL Injection with internal Path Disclosure

Hello, Through manipulating Parameter i get an SQL Error which can lead to SQL Injection. Plus that there is an internal Path Disclosure. Best regards Ahmed Hassan...

Online Food Ordering System SQL Injection Vulnerability

Online Food Ordering System is an online food ordering system. an SQL injection vulnerability exists in Online Food Ordering System, which stems from a problem with some unknown functions in the file viewprod.php, where manipulation of the parameter id can lead to sql injection. No details of the...

TuziCMS SQL注入漏洞

TuziCMS Rabbit CMS is a PHP and MySQL based enterprise website content management system CMS. A SQL injection vulnerability exists in TuziCMS version 2.0.6, which stems from a problem with the function delall in the file appmanage controllerkefucontroller.class.php of the component article module...

php-form-builder-class 跨站脚本漏洞

php-form-builder-class is an application by manikandan170890, an individual developer. A cross-site scripting vulnerability exists in php-form-builder-class, which stems from a problem with an unknown function in the PFBC/Element/Textarea.php file in the component Textarea Handler, where...

Surpass 路径遍历漏洞

Surpass is a PHP package developed primarily for Laravel by the individual developer Sukohi Kuhoh. It is used to manage uploading images and displaying thumbnails using Ajax. A path traversal vulnerability exists in Surpass versions prior to 1.0.0, which stems from unknown code in the file...

DevNewsAggregator SQL注入漏洞

DevNewsAggregator is a development news aggregator by Steve Jagodzinski Personal Developer. DevNewsAggregator suffers from a SQL injection vulnerability that stems from a problem with the function getByName in the file php/dataaccess/RemoteHtmlContentDataAccess.php, where manipulation of the...

CVE-2022-48217

The tfremappernode component 1.1.1 for Robot Operating System ROS allows attackers, who control the source code of a different node in the same ROS application, to change a robot's behavior. This occurs because a topic name depends on the attacker-controlled oldtftopicname and/or newtftopicname...

cilla 跨站脚本漏洞

cilla is a blog written in Java by Richard Körber, an individual developer. A cross-site scripting vulnerability exists in cilla, which stems from cross-site scripting due to incorrect manipulation of the parameter details...