1604 matches found
CVE-2025-11551 code-projects Student Result Manager Database.java sql injection
A vulnerability was determined in code-projects Student Result Manager 1.0. This affects an unknown function of the file src/students/Database.java. This manipulation of the argument roll/name/gpa causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...
CVE-2025-11551: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in code-projects Student Result Manager 1.0. This affects an unknown function of the file src/students/Database.java. This manipulation of the argument roll/name/gpa causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...
Code-Projects Student Result Manager 安全漏洞
Code-Projects Student Result Manager is a student result management tool from Code-Projects. A security vulnerability exists in Code-Projects Student Result Manager version 1.0, which stems from an incorrect manipulation of the parameter roll/name/gpa in the file src/students/Database.java, which...
PT-2025-41446
Name of the Vulnerable Software and Affected Versions Student Result Manager version 1.0 Description A flaw exists in Student Result Manager version 1.0 that allows for remote execution of SQL injection attacks. The issue stems from manipulating the roll, name, or gpa arguments within the...
GHSA-XX7H-2WF7-HC7P Liferay Portal is vulnerable to XSS through its Commerce Search Result widget
Cross-site Scripting XSS vulnerability in the Commerce Search Result widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2023.Q4 before patch 6, 2023.Q3 before patch 9, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload...
CVE-2025-43823
Cross-site scripting XSS vulnerability in the Commerce Search Result widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2023.Q4 before patch 6, 2023.Q3 before patch 9, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload...
CVE-2025-43823
Cross-site scripting XSS vulnerability in the Commerce Search Result widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2023.Q4 before patch 6, 2023.Q3 before patch 9, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload...
CVE-2025-43823
Cross-site scripting XSS vulnerability in the Commerce Search Result widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2023.Q4 before patch 6, 2023.Q3 before patch 9, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload...
EUVD-2005-4719
Malware in sbrugna...
EUVD-2017-6256
Malware in sbrugna...
EUVD-2011-0045
Malware in sbrugna...
EUVD-2021-21707
Malware in sbrugna...
EUVD-2021-23649
Malware in sbrugna...
EUVD-2018-1328
Malware in sbrugna...
EUVD-2012-5536
Malware in sbrugna...
EUVD-2007-1502
Malware in sbrugna...
EUVD-2020-22948
Malware in sbrugna...
EUVD-2012-6592
Malware in sbrugna...
CVE-2025-43823: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Commerce Search Result widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2023.Q4 before patch 6, 2023.Q3 before patch 9, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload...