CVE-2024-41930

Cross-site scripting vulnerability exists in MF Teacher Performance Management System version 6. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product...

CVE-2024-41930

Cross-site scripting vulnerability exists in MF Teacher Performance Management System version 6. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product...

CVE-2024-41930

The MF Teacher Performance Management System version 6 , provided by Media Fusion Co.,Ltd., is vulnerable to a cross-site scripting (XSS) vulnerability (CWE-79 ). This flaw allows an attacker to execute arbitrary scripts in the web browser of any user accessing the website using the affected prod...

CVE-2024-41930: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability exists in MF Teacher Performance Management System version 6. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product...

Information leakage vulnerability in the nursing performance management system of Hangzhou Yunzai Information Technology Co.

The Nursing Performance Management System establishes a scientific personnel management model, an education and training model, a performance appraisal model, and a hierarchical management model to guide the scientific allocation of hospital human resources. There is an information leakage...

CVE-2017-13982

A directory traversal vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows users to upload unrestricted files...

CVE-2017-13982: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows users to upload unrestricted files...

CVE-2017-13983: Improper Authentication

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to bypass authentication...

CVE-2017-13984: Improper Authentication

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to delete arbitrary files via servlet directory traversal...

CVE-2017-13985: Improper Limitation of a Pathname to a Restricted Directory

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to traverse directory leading to disclosure of information...

PT-2017-13177

Name of the Vulnerable Software and Affected Versions HPE BSM Platform Application Performance Management System Health versions 9.26, 9.30, 9.40 Description A directory traversal issue allows users to upload unrestricted files, potentially leading to security breaches. Recommendations For versio...

Hewlett Packard Enterprise Application Performance Management System Health UploadManager Servlet Directory Traversal Unrestricted File Upload Vulnerability

This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of Hewlett Packard Enterprise Application Performance Management System Health. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed...

PT-2017-13178

Name of the Vulnerable Software and Affected Versions HPE BSM Platform Application Performance Management System Health versions 9.26, 9.30, 9.40 Description The issue allows remote users to delete arbitrary files via servlet directory traversal in the SHExportToExcel Servlet. Recommendations For...

PT-2017-13179

Name of the Vulnerable Software and Affected Versions HPE BSM Platform Application Performance Management System Health versions 9.26, 9.30, 9.40 Description The issue allows remote users to traverse directories, leading to the disclosure of information due to an authentication vulnerability...