OpenEMR 安全漏洞

OpenEMR is a set of open-source medical management systems developed by the OpenEMR community. This system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. Versions of OpenEMR prior to 7.0.4 contained security...

EUVD-2022-52652

Malicious code in bioql PyPI...

CVE-2022-30839

Room-rent-portal-site v1.0 is vulnerable to Cross Site Scripting XSS via /rrps/classes/Master.php?f=savecategory, vehiclename...

CVE-2022-30843

Room-rent-portal-site v1.0 is vulnerable to SQL Injection via /rrps/classes/Master.php?f=deletecategory, id...

CVE-2022-31910

Online Tutor Portal Site v1.0 is vulnerable to Cross Site Scripting XSS. via /otps/classes/Master.php...

CVE-2022-31910

The CVE-2022-31910 entry concerns Online Tutor Portal Site v1.0 with a Cross-Site Scripting (XSS) vulnerability exploitable via /otps/classes/Master.php. The issue arises from lack of filtering/escaping of parameter data, enabling client-side JavaScript execution. Multiple connected sources (e.g....

CVE-2022-31910: Improper Neutralization of Input During Web Page Generation

Online Tutor Portal Site v1.0 is vulnerable to Cross Site Scripting XSS. via /otps/classes/Master.php...

PT-2022-20986

Name of the Vulnerable Software and Affected Versions Online Tutor Portal Site version 1.0 Description The issue concerns a SQL Injection vulnerability via the "/otps/classes/Master.php?f=delete team" API endpoint. This allows for potential unauthorized access and manipulation of database content...

Online Tutor Portal Site SQL注入漏洞

Sourcecodester Online Discussion Forum Site is an application of Sourcecodester. A SQL injection vulnerability exists in Online Tutor Portal Site v1.0, which originates from /otps/classes/Master.php?f=deleteteam missing SQL data filter escaping. An attacker could use this vulnerability to execute...

CVE-2022-31912: Improper Neutralization of Special Elements used in an SQL Command

Online Tutor Portal Site v1.0 is vulnerable to SQL Injection via /otps/classes/Master.php?f=deleteteam...

PT-2022-20984

Name of the Vulnerable Software and Affected Versions Online Tutor Portal Site version 1.0 Description The issue is related to Cross Site Scripting XSS via the "/otps/classes/Master.php" endpoint. This allows for potential malicious script execution. Recommendations For Online Tutor Portal Site...

CVE-2022-30839

Room-rent-portal-site v1.0 is vulnerable to Cross Site Scripting XSS via /rrps/classes/Master.php?f=savecategory, vehiclename...

Cross site scripting

Room-rent-portal-site v1.0 is vulnerable to Cross Site Scripting XSS via /rrps/classes/Master.php?f=savecategory, vehiclename...

Sql injection

Room-rent-portal-site v1.0 is vulnerable to SQL Injection via /rrps/classes/Master.php?f=deletecategory, id...

CVE-2022-30839

Room-rent-portal-site v1.0 is vulnerable to Cross Site Scripting XSS via /rrps/classes/Master.php?f=savecategory, vehiclename...

CVE-2022-30839

CVE-2022-30839 affects Room-rent-portal-site v1.0 and is described as a Cross-Site Scripting (XSS) vulnerability exposed via the parameter vehicle_name in /rrps/classes/Master.php?f=save_category. The current documents provide the vulnerability type and location but do not include root-cause deta...

CVE-2022-30843

Room-rent-portal-site v1.0 is vulnerable to SQL Injection via /rrps/classes/Master.php?f=deletecategory, id...

CVE-2022-30843

CVE-2022-30843 affects Room-rent-portal-site v1.0. The vulnerability is SQL Injection in /rrps/classes/Master.php?f=delete_category, id, enabling unauthenticated or low-privilege access to manipulate the database. Connected documents corroborate the issue and indicate high impact on confidentiali...

CVE-2022-30839: Improper Neutralization of Input During Web Page Generation

Room-rent-portal-site v1.0 is vulnerable to Cross Site Scripting XSS via /rrps/classes/Master.php?f=savecategory, vehiclename...

CVE-2022-30843: Improper Neutralization of Special Elements used in an SQL Command

Room-rent-portal-site v1.0 is vulnerable to SQL Injection via /rrps/classes/Master.php?f=deletecategory, id...