256 matches found
Cross site scripting
POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...
CVE-2023-36346
POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...
CVE-2023-36346
POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...
CVE-2023-36346
POS Codekop v2.0 has a reflected XSS vulnerability in the print.php endpoint through the nm_member parameter. Affects the web application’s print.php handling, enabling injection of script code that could be executed in users’ browsers. The Nuclei template and Red Hat/NVD references confirm the i...
CVE-2023-36346: Improper Neutralization of Input During Web Page Generation
POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...
Cross site scripting
Cross site scripting XSS vulnerability in sourcecodester oretnom23 sales management system 1.0, allows attackers to execute arbitrary code via the productname and productprice inputs in file print.php...
CVE-2023-23026: Improper Neutralization of Input During Web Page Generation
Cross site scripting XSS vulnerability in sourcecodester oretnom23 sales management system 1.0, allows attackers to execute arbitrary code via the productname and productprice inputs in file print.php...
CVE-2023-23026
Cross site scripting XSS vulnerability in sourcecodester oretnom23 sales management system 1.0, allows attackers to execute arbitrary code via the productname and productprice inputs in file print.php...
Reflected XSS on msg Parameter
Description Hello Team, Hope you're doing well, There is no sanitization for the user input in msg parameter on the print.php file. Proof of Concept for some reason, I don't know why I can't prove the vulnerability on demo.bumsys.org but here is the PoC payload is:...
CVE-2022-43329
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php...
Sql injection
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php...
CVE-2022-43329
CVE-2022-43329 corresponds to a SQL injection in Canteen Management System v1.0, exploitable via the id parameter on /print.php. The vulnerability affects confidentiality, integrity, and availability (CVSS v3.1 base score 7.2; AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The connected data confirms the ...
CVE-2022-43329
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php...
CVE-2022-43329
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php...
CVE-2022-43329: Improper Neutralization of Special Elements used in an SQL Command
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php...
Garage Management System SQL Injection Vulnerability (CNVD-2022-62232)
Garage Management System Cms-Website is a garage management system. A SQL injection vulnerability exists in Garage Management System v1.0, which stems from a lack of validation of externally entered SQL statements in the id parameter of /print.php. An attacker could use this vulnerability to...
Design/Logic Flaw
An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to access data for all existing orders...
CVE-2022-36638
An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to access data for all existing orders...
CVE-2022-36638
CVE-2022-36638 affects Garage Management System v1.0, specifically the print.php component. The underlying issue is an access control flaw that allows unauthenticated attackers to read data for all existing orders. This is confirmed across multiple sources in the connected documents, which consis...
