Computer Laboratory Management System 跨站脚本漏洞

Computer Laboratory Management System is a computer laboratory management system. A cross-site scripting vulnerability exists in SourceCodester Computer Laboratory Management System version 1.0, which stems from a cross-site scripting XSS vulnerability in the parameter name of file...

WebRAT 代码问题漏洞

WebRAT is a simple remote web management tool. A code issue vulnerability exists in cyberaz0r WebRAT, which stems from a security issue in the downloadfile function in Server/api.php, which causes unrestricted uploads via the parameter name...

Automated-Mess-Management-System Security Vulnerability

Automated-Mess-Management-System is an automated measurement management system by the individual developer Boyiddhanath Roy. A security vulnerability exists in Automated-Mess-Management-System version 1.0, which stems from the fact that incorrect manipulation of the parameter name can lead to...

FAQ Management System Cross-Site Scripting Vulnerability

FAQ Management System is a FAQ management system by Remy Andrade, a personal developer. A cross-site scripting vulnerability exists in version 1.0 of the FAQ Management System, which stems from the parameter Frequently Asked Question in the component Update FAQ that causes cross-site scripting...

PbootCMS Cross-Site Scripting Vulnerability

PbootCMS is a PbootCMS personal developer of an open source enterprise website content management system CMS developed using the PHP language. A cross-site scripting vulnerability exists in PbootCMS version 3.2.5-20230421, which stems from the presence of an unknown function in the system that...

MCS: Machine catalogue update fails due to ErrorID: FailedToReadMasterImageMetadata

MCS Catalogs on HyperV with SCVMM Server 2019 can't be updated. The following error is displayed: Exception: DesktopStudioErrorId ProvisioningTaskError Error Category: NotSpecified ErrorID : FailedToReadMasterImageMetadata TaskErrorInformation :Terminated InternalErrorMessage: The value must not ...

PT-2024-11503 · WordPress · The Super Forms - Drag & Drop Form Builder

Name of the Vulnerable Software and Affected Versions: The Super Forms - Drag & Drop Form Builder WordPress plugin versions prior to 6.0.4 Description: The issue is related to a Reflected Cross-Site Scripting problem. The bob czy panstwa sprawa zostala rozwiazana parameter is not properly escaped...

CVE-2023-48827

Time Slots Booking Calendar 4.0 is vulnerable to Multiple HTML Injection issues via the name, pluginsmsapikey, pluginsmscountrycode, calendarid, title, country name, or customername parameter...

EasyUse MailHunter Ultimate SQL Injection Vulnerability

EasyUse MailHunter Ultimate is an accurate email finder tool from EasyUse China. A security vulnerability exists in EasyUse MailHunter Ultimate 2023 and prior versions, which stems from the presence of a SQL injection vulnerability that allows an authenticated remote user to execute arbitrary SQL...

Inventory Management System 跨站脚本漏洞

Inventory Management System is an inventory management system by stemword individual developers. A cross-site scripting vulnerability exists in SourceCodester Inventory Management System version 1.0, which stems from the parameter name/company in the file suppliardata.php that causes cross-site...

Campcodes Beauty Salon Management System 跨站脚本漏洞

Campcodes Beauty Salon Management System is a beauty salon management system from Campcodes, Inc. A cross-site scripting vulnerability exists in Campcodes Beauty Salon Management System version 1.0, which originates from an unknown part of /admin/add-category.php and results in cross-site scripti...

Tiva Events Calender 跨站脚本漏洞

Tiva Events Calender is a calendar application by the individual developer of tivatheme. A cross-site scripting vulnerability exists in Tiva Events Calender version 1.4, which stems from the parameter name leading to cross-site scripting...

Onest CRM 跨站脚本漏洞

Onest CRM is a CRM system from Onest Corporation. A cross-site scripting vulnerability exists in Onest CRM version 1.0, which stems from the parameter name in the file /admin/project/update/2 can lead to cross-site scripting...

SUSE CVE-2023-33546

Janino 3.1.9 and earlier are subject to denial of service DOS attacks when using the expression evaluator.guess parameter name method. If the parser runs on user-supplied input, an attacker could supply content that causes the parser to crash due to a stack overflow. NOTE: this is disputed by...

UBUNTU-CVE-2023-33546

DISPUTED Janino 3.1.9 and earlier are subject to denial of service DOS attacks when using the expression evaluator.guess parameter name method. If the parser runs on user-supplied input, an attacker could supply content that causes the parser to crash due to a stack overflow. NOTE: this is disput...

Simple Student Information System 跨站脚本漏洞

Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can be used to help a university or college manage student information and academic records. A cross-site scripting vulnerability exists in Simple Student Information System version...

Earnings and Expense Tracker App 跨站脚本漏洞

Expense Tracker is an expense tracker organized by SourceCode and Projects. A security vulnerability exists in the SourceCodester Earnings and Expense Tracker App version 1.0, which stems from incorrect manipulation of the parameter name resulting in cross-site scripting...

Earnings and Expense Tracker App 跨站脚本漏洞

Expense Tracker is an expense tracker organized by SourceCode and Projects. A security vulnerability exists in the SourceCodester Earnings and Expense Tracker App version 1.0, which stems from an error in the parameter name leading to cross-site scripting...

Earnings and Expense Tracker App 跨站脚本漏洞

Expense Tracker is an expense tracker organized by SourceCode and Projects. A security vulnerability exists in the SourceCodester Earnings and Expense Tracker App version 1.0, which stems from incorrect manipulation of the parameter name resulting in cross-site scripting...

Simple Customer Relationship Management SQL注入漏洞

Simple Customer Relationship Management Simple CRM is a Simple Customer Relationship Management System by Carlo Montero Personal Developer. A security vulnerability exists in Simple Customer Relationship Management System v1.0, which stems from a SQL injection vulnerability via the parameter name...