PT-2022-23622 · Algosec · Algosec Fireflow

Name of the Vulnerable Software and Affected Versions: AlgoSec FireFlow affected versions not specified Description: The issue involves a Reflected Cross-Site-Scripting RXSS attack. A malicious user can inject JavaScript code into the IntersectudRule parameter on the "search/result.html" page. By...

CVE-2022-42021

Best Student Result Management System v1.0 is vulnerable to SQL Injection via /upresult/upresult/notice-details.php?nid=...

CVE-2022-42021

Best Student Result Management System v1.0 is vulnerable to SQL Injection via /upresult/upresult/notice-details.php?nid=...

Sql injection

Best Student Result Management System v1.0 is vulnerable to SQL Injection via /upresult/upresult/notice-details.php?nid=...

CVE-2022-42021

Best Student Result Management System v1.0 is vulnerable to SQL Injection via /upresult/upresult/notice-details.php?nid=...

Best Student Result Management System SQL注入漏洞

Best Student Result Management System is a student result management system by Mayuri K. Individual developer. A security vulnerability exists in version 1.0 of Best Student Result Management System, which stems from an SQL injection issue in the /upresult/upresult/notice-details.php?nid= locatio...

CVE-2022-42021

Best Student Result Management System v1.0 is vulnerable to SQL Injection via /upresult/upresult/notice-details.php?nid=...

CVE-2022-42021

CVE-2022-42021 affects the Best Student Result Management System v1.0. A SQL Injection vulnerability exists in the endpoint “/upresult/upresult/notice-details.php?nid=”, exploitable via the nid HTTP parameter. The CVSS v3.1 base score is 9.8 (CRITICAL) with network attack vector, low complexity, ...

PT-2022-26209 · Unknown · Student Result Management System

Name of the Vulnerable Software and Affected Versions: Best Student Result Management System version 1.0 Description: The issue concerns SQL Injection. It can be exploited via the "/upresult/upresult/notice-details.php?nid=" endpoint, specifically through the nid variable. Recommendations: For Be...

GSD-2022-1006342 RDMA/srp: Set scmnd->result only when scmnd is not NULL

RDMA/srp: Set scmnd-result only when scmnd is not NULL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...

CVE-2022-40887

SourceCodester Best Student Result Management System 1.0 is vulnerable to SQL Injection...

CVE-2022-40887

SourceCodester Best Student Result Management System 1.0 is vulnerable to SQL Injection...

Sql injection

SourceCodester Best Student Result Management System 1.0 is vulnerable to SQL Injection...

CVE-2022-40887

SourceCodester Best Student Result Management System 1.0 is vulnerable to SQL Injection...

CVE-2022-40887

SourceCodester Best Student Result Management System 1.0 is vulnerable to SQL Injection...

Best Student Result Management System SQL注入漏洞

Best Student Result Management System is a student result management system by Mayuri K. Individual developer. A security vulnerability exists in version 1.0 of Best Student Result Management System, which stems from vulnerability to SQL injection attacks...

PT-2022-25609 · Sourcecodester · Sourcecodester Best Student Result Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Student Result Management System version 1.0 Description: The issue allows for SQL Injection, which can be exploited by attackers. Recommendations: For version 1.0, update to a newer version that contains a fix for this...

Upgraded Q -> M from 238 [1664280434191]

Judge has assessed an item in Issue 238 as Medium risk. The relevant finding follows: 5. Wrong comparison result when the length is longer than 32 File: contracts\dnssec-oracle\BytesUtils.sol 44: function comparebytes memory self, uint offset, uint len, bytes memory other, uint otheroffset, uint...

Upgraded Q -> M from 238 [1664280666405]

Judge has assessed an item in Issue 238 as Medium risk. The relevant finding follows: 5. Wrong comparison result when the self is longer than other File: contracts\dnssec-oracle\BytesUtils.sol 115: function equalsbytes memory self, uint offset, bytes memory other internal pure returns bool 116:...

F5 Networks BIG-IP : GNU C Library vulnerability (K64119434)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K64119434 advisory. In the GNU C Library aka glibc or libc6 before 2.28, parseregexp in posix/regcomp.c misparses alternatives, which allows...