OpenEMR 安全漏洞

OpenEMR is a set of open-source medical management systems developed by the OpenEMR community. This system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. Versions of OpenEMR prior to 7.0.4 contained security...

EUVD-2022-52652

Malicious code in bioql PyPI...

CVE-2022-30839

Room-rent-portal-site v1.0 is vulnerable to Cross Site Scripting XSS via /rrps/classes/Master.php?f=savecategory, vehiclename...

CVE-2022-30843

Room-rent-portal-site v1.0 is vulnerable to SQL Injection via /rrps/classes/Master.php?f=deletecategory, id...

CVE-2022-31910

Online Tutor Portal Site v1.0 is vulnerable to Cross Site Scripting XSS. via /otps/classes/Master.php...

CVE-2022-31910

The CVE-2022-31910 entry concerns Online Tutor Portal Site v1.0 with a Cross-Site Scripting (XSS) vulnerability exploitable via /otps/classes/Master.php. The issue arises from lack of filtering/escaping of parameter data, enabling client-side JavaScript execution. Multiple connected sources (e.g....

Online Tutor Portal Site SQL注入漏洞

Sourcecodester Online Discussion Forum Site is an application of Sourcecodester. A SQL injection vulnerability exists in Online Tutor Portal Site v1.0, which originates from /otps/classes/Master.php?f=deleteteam missing SQL data filter escaping. An attacker could use this vulnerability to execute...

CVE-2022-30839

Room-rent-portal-site v1.0 is vulnerable to Cross Site Scripting XSS via /rrps/classes/Master.php?f=savecategory, vehiclename...

Sql injection

Room-rent-portal-site v1.0 is vulnerable to SQL Injection via /rrps/classes/Master.php?f=deletecategory, id...

Cross site scripting

Room-rent-portal-site v1.0 is vulnerable to Cross Site Scripting XSS via /rrps/classes/Master.php?f=savecategory, vehiclename...

CVE-2022-30839

Room-rent-portal-site v1.0 is vulnerable to Cross Site Scripting XSS via /rrps/classes/Master.php?f=savecategory, vehiclename...

CVE-2022-30839

CVE-2022-30839 affects Room-rent-portal-site v1.0 and is described as a Cross-Site Scripting (XSS) vulnerability exposed via the parameter vehicle_name in /rrps/classes/Master.php?f=save_category. The current documents provide the vulnerability type and location but do not include root-cause deta...

CVE-2022-30843

Room-rent-portal-site v1.0 is vulnerable to SQL Injection via /rrps/classes/Master.php?f=deletecategory, id...

CVE-2022-30843

CVE-2022-30843 affects Room-rent-portal-site v1.0. The vulnerability is SQL Injection in /rrps/classes/Master.php?f=delete_category, id, enabling unauthenticated or low-privilege access to manipulate the database. Connected documents corroborate the issue and indicate high impact on confidentiali...

Path Traversal in Apache Jetspeed

Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed before 2.3.1 allows remote authenticated administrators to write to arbitrary files, and consequently execute arbitrary code, via a .. dot dot in a ZIP archive entry, as demonstrated by...

Job Portal Script 3.0 Cross Site Scripting / SQL Injection Vulnerabilities

Exploit for php platform in category web applications Title: Job portal Script v3.0 - SQL Injection / Cross Site Scripting Credit: Bilal KARDADOU Vendor: www.jobportalscript.com Vendor URL: http://www.jobportalscript.com/index.html Product: Job portal site. Google Dork: categorysearch.php?indus=...

CodePaul ClipMass - SQL Injection

CodePaul ClipMass - SQL Injection Exploit Title: CodePaul ClipMass - Video Portal Site - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://codepaul.com/ Software Buy: https://codecanyon.net/item/codepaul-clipmass-video-portal-site/14681505 Demo: http://codepaul.com/clipmass/...

CVE-2016-0709

Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed before 2.3.1 allows remote authenticated administrators to write to arbitrary files, and consequently execute arbitrary code, via a .. dot dot in a ZIP archive entry, as demonstrated by...

CVE-2016-0709

Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed before 2.3.1 allows remote authenticated administrators to write to arbitrary files, and consequently execute arbitrary code, via a .. dot dot in a ZIP archive entry, as demonstrated by...

CVE-2016-0709

Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed before 2.3.1 allows remote authenticated administrators to write to arbitrary files, and consequently execute arbitrary code, via a .. dot dot in a ZIP archive entry, as demonstrated by...