Lucene search
+L

7 matches found

osv_cve
osv_cve
•added 2026/02/20 12:00 a.m.•18 views

CVE-2025-70833

An Authentication Bypass vulnerability in Smanga 3.2.7 allows an unauthenticated attacker to reset the password of any user including the administrator and fully takeover the account by manipulating POST parameters. The issue stems from insecure permission validation in check-power.php...

9.4CVSS5.9AI score0.00462EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/06/04 10:00 a.m.•16 views

CVE-2025-5584 PHPGurukul Hospital Management System POST Parameter edit-patient.php cross site scripting

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been classified as problematic. Affected is an unknown function of the file /doctor/edit-patient.php?editid=2 of the component POST Parameter Handler. The manipulation of the argument patname leads to cross site...

4.8CVSS3.3AI score0.00361EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/01/13 12:00 a.m.•28 views

PT-2025-1474 · Selesta · Selesta Visual Access Manager

Name of the Vulnerable Software and Affected Versions: Selesta Visual Access Manager VAM versions prior to 4.42.2 Description: An issue was discovered in Selesta Visual Access Manager VAM where an authenticated attacker can write arbitrary files by manipulating POST parameters of the page...

6.5CVSS5.9AI score0.00362EPSS
SaveExploits0References5
NVD
NVD
•added 2024/11/13 9:15 p.m.•52 views

CVE-2024-45876

The login form of baltic-it TOPqw Webportal v1.35.283.2 fixed in version 1.35.283.4 at /Apps/TOPqw/Login.aspx is vulnerable to SQL injection. The vulnerability exists in the POST parameter txtUsername, which allows for manipulation of SQL queries...

6.5CVSS0.00345EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/13 12:00 a.m.•32 views

CVE-2024-45876

The login form of baltic-it TOPqw Webportal v1.35.283.2 fixed in version 1.35.283.4 at /Apps/TOPqw/Login.aspx is vulnerable to SQL injection. The vulnerability exists in the POST parameter txtUsername, which allows for manipulation of SQL queries...

6AI score0.00345EPSS
SaveExploits0References1
NVD
NVD
•added 2022/09/06 8:15 p.m.•31 views

CVE-2022-37253

Persistent cross-site scripting XSS in Crime Reporting System 1.0 allows a remote attacker to introduce arbitary Javascript via manipulation of an unsanitized POST parameter...

5.4CVSS0.00798EPSS
SaveExploits0References2
Exploit DB
Exploit DB
•added 2017/03/03 12:00 a.m.•63 views

EPSON TMNet WebConfig 1.00 - Cross-Site Scripting

Exploit Title: Persistent XSS in EPSON TMNet WebConfig Ver. 1.00 Google Dork: intitle:"EPSON TMNet WebConfig Ver.1.00" Date: 3/3/2017 Exploit Author: Michael Benich Vendor Homepage: https://www.epson-biz.com/ Software Link: https://c4b.epson-biz.com/modules/community/index.php?contentid=50 Versio...

6.1CVSS6.2AI score0.03329EPSS
SaveExploits5
Rows per page
Query Builder