189 matches found
CVE-2025-50976
IPFire 2.29 DNS management interface dns.cgi fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLSHOSTNAME query parameters, resulting in a reflected cross-site scripting XSS vulnerability...
CVE-2025-50976
IPFire 2.29 DNS management interface dns.cgi fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLSHOSTNAME query parameters, resulting in a reflected cross-site scripting XSS vulnerability...
CVE-2025-50976
IPFire 2.29 DNS management interface dns.cgi fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLSHOSTNAME query parameters, resulting in a reflected cross-site scripting XSS vulnerability...
PT-2025-34800 · Ipfire · Ipfire
Name of the Vulnerable Software and Affected Versions: IPFire version 2.29 Description: The DNS management interface dns.cgi in IPFire fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLS HOSTNAME query parameters. This results in a reflected cross-site scripting XSS...
CVE-2025-50976
The IPFire 2.29 DNS management interface is vulnerable to a reflected cross-site scripting (XSS) attack within the dns.cgi component. The root cause is the failure to properly sanitize user-supplied input provided via the NAMESERVER , REMARK , and TLS_HOSTNAME query parameters. Exploitation of th...
CVE-2025-8987
A vulnerability was identified in SourceCodester COVID 19 Testing Management System 1.0. This affects an unknown part of the file /test-details.php. The manipulation of the argument remark leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to th...
CVE-2025-8987
A vulnerability was identified in SourceCodester COVID 19 Testing Management System 1.0. This affects an unknown part of the file /test-details.php. The manipulation of the argument remark leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to th...
CVE-2025-8987
A vulnerability was identified in SourceCodester COVID 19 Testing Management System 1.0. This affects an unknown part of the file /test-details.php. The manipulation of the argument remark leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to th...
CVE-2025-8987
Affected product: SourceCodester COVID 19 Testing Management System 1.0. Vulnerable component: file /test-details.php; vulnerable parameter: remark. Root cause: SQL injection due to manipulation of remark, enabling remote attack. CVSS indicators in the included documents show high–critical impact...
CVE-2025-6287
A vulnerability classified as problematic was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /test-details.php of the component Take Action. The manipulation of the argument remark leads to cross site scripting. Th...
CVE-2025-5725
A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /script/academic/grading-system of the component Grading System Page. The manipulation of the argument Rema...
SourceCodester Student Result Management System 代码注入漏洞
SourceCodester Student Result Management System is a SourceCodester open source student result management system . A code injection vulnerability exists in SourceCodester Student Result Management System version 1.0, which originates from an incorrect operation of the parameter Remark in the file...
CVE-2025-5079
A flaw has been found in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/updateorder.php. Executing manipulation of the argument remark can lead to sql injection. The attack may be performed from remote. The exploit ha...
CVE-2025-3828
A vulnerability was found in PHPGurukul Men Salon Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/view-appointment.php?viewid=11. The manipulation of the argument remark leads to sql injection. The attack may be initiated remotely. T...
The vulnerability of the modifyWifiFilterRules() function in the Tenda W15E router software allows a hacker to trigger a service failure.
The vulnerability of the modifyWifiFilterRules function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the wifiFilterListRemark parameter. Exploiting this vulnerability could allow a remote attacker t...
PT-2025-3869 · Unknown · Longpi1 Warehouse
Name of the Vulnerable Software and Affected Versions: longpi1 warehouse version 1.0 Description: A cross-site scripting issue has been found in the longpi1 warehouse software. The vulnerability affects an unknown functionality of the file /resources/..;/inport/updateInport of the Backend...
itsourcecode Farm Management System SQL注入漏洞
itsourcecode Farm Management System is an itsourcecode open source farm management system. SQL injection vulnerability exists in itsourcecode Farm Management System version 1.0, which originates from SQL injection of parameters pigno/weight/arrived/breed/remark/status...
PHPGurukul Boat Booking System 安全漏洞
PHPGurukul Boat Booking System is a boat booking system from PHPGurukul. A security vulnerability exists in version 1.0 of the PHPGurukul Boat Booking System that originates from a cross-site scripting vulnerability in the Official Remark parameter in the /admin/book-details.php page of the Booki...
CVE-2024-7151
A vulnerability was found in Tenda O3 1.0.0.102478. It has been declared as critical. This vulnerability affects the function fromMacFilterSet of the file /goform/setMacFilter. The manipulation of the argument remark leads to stack-based buffer overflow. The attack can be initiated remotely. The...