9 matches found
CVE-2025-41335
CVE-2025-41335 concerns CanalDenuncia.app and is tied to an information-disclosure vulnerability caused by missing authorization checks for parameters id and id_sociedad in the endpoint /api/buscarEmpresaById.php. Multiple connected sources (CNVD-2025-30334, RH-CVE-2025-41335, NVD/CVELIST/CNNVD e...
CVE-2025-41335 Missing Authorization vulnerability in CanalDenuncia.app
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id' and ' 'idsociedad' in '/api/buscarEmpresaById.php'...
EUVD-2006-3381
Malware in sbrugna...
CVE-2023-41521
Student Attendance Management System v1 contains multiple SQL injection vulnerabilities located in the createSessionTerm.php file. The root cause is the incorrect manipulation and lack of sanitization of the id, termId, and sessionName parameters. Successful exploitation could allow an attacker t...
itsourcecode Tailoring Management System 注入漏洞
itsourcecode Tailoring Management System is a tailoring management system from itsourcecode open source. An injection vulnerability exists in version 1.0 of itsourcecode Tailoring Management System, which stems from the parameter id/amount/desc/inccat in the file /addpayment.php that can lead to...
Codezips Pet Shop Management System 安全漏洞
Codezips Pet Shop Management System is an open source pet store management system from Codezips. A security vulnerability exists in Codezips Pet Shop Management System version 1.0, which is caused by a SQL injection in the parameter id or name...
Medicine Tracker System SQL Injection Vulnerability
Medicine Tracker System is a medicine tracking system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Medicine Tracking System version 1.0, which stems from some unknown processing in /classes/Master.php that leads to SQL injection via the parameters...
PT-2023-26479 · Typo3 · Typo3
Name of the Vulnerable Software and Affected Versions: TYPO3 versions 9.4.0 through 9.5.41 ELTS TYPO3 versions 10.4.0 through 10.4.38 ELTS TYPO3 versions 11.5.0 through 11.5.29 TYPO3 versions 12.4.0 through 12.4.3 Description: In multi-site scenarios, enumerating the HTTP query parameters id and ...
