43 matches found
CVE-2026-93528
The NP Quote Request for WooCommerce WordPress plugin (versions 2.0-2.4.15 ) is vulnerable to unauthenticated order data disclosure . The root cause is located in the gpls_woo_rfq_get_rfq_cart() function within includes/classes/gpls_woo_rfq_functions.php, which fails to validate order ownership w...
EUVD-2018-9289
Malware in sbrugna...
EUVD-2019-2184
Malware in sbrugna...
EUVD-2018-0197
Malware in sbrugna...
EUVD-2023-41567
Malicious code in bioql PyPI...
EUVD-2025-32123
Malicious code in bioql PyPI...
EUVD-2024-48244
Malicious code in bioql PyPI...
CVE-2025-59749
Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l' parameter in...
CVE-2024-7303
A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /request.php of the component Send Blood Request Page. The manipulation of the argument Address/bloodgroup leads to cross sit...
CVE-2023-37689
Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Booking Request page...
CVE-2018-17536
An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is stored XSS on the merge request page via project import...
CVE-2024-7303 itsourcecode Online Blood Bank Management System Send Blood Request Page request.php cross site scripting
A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /request.php of the component Send Blood Request Page. The manipulation of the argument Address/bloodgroup leads to cross sit...
CVE-2024-7303: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /request.php of the component Send Blood Request Page. The manipulation of the argument Address/bloodgroup leads to cross sit...
CVE-2024-3091 PHPGurukul Emergency Ambulance Hiring Portal Search Request Page search.php cross site scripting
A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/search.php of the component Search Request Page. The manipulation leads to cross site scripting. It is possible to launch the...
CVE-2024-3091: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/search.php of the component Search Request Page. The manipulation leads to cross site scripting. It is possible to launch the...
Blood Bank & Donor Management SQL Injection Vulnerability
Blood Bank & Donor Management is a blood bank and donor management system. Blood Bank & Donor Management version 5.6 suffers from a SQL injection vulnerability that originates from a flaw in the /admin/request-received-bydonar.php file...
CVE-2023-37689
Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Booking Request page...
CVE-2023-37687
Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the View Request of Nurse Page in the Admin portal...
Maid Hiring Management System Cross-Site Scripting Vulnerability
PHPGurukul Maid Hiring Management System is a maid hiring management system from PHPGurukul, Inc. A security vulnerability exists in Maid Hiring Management System v1.0, which is caused by a SQL injection vulnerability in the Booking Request page...
CVE-2023-37689
CVE-2023-37689 affects Maid Hiring Management System v1.0. The connected sources consistently describe a SQL injection vulnerability on the Booking Request page. The exact root cause is not detailed in the documents, but the vulnerability enables SQL queries to be manipulated through user input. ...