5244 matches found
Cross site scripting
Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting XSS via /odfs/classes/Master.php?f=savecategory, name...
PT-2022-20987 · Unknown · Online Discussion Forum Site
Name of the Vulnerable Software and Affected Versions: Online Discussion Forum Site version 1.0 Description: The issue is related to Cross Site Scripting XSS via the "/odfs/classes/Master.php?f=save category" API endpoint, specifically affecting the name variable. This allows for potential...
PT-2022-20670 · Online Discussion Forum Site +1 · Online Discussion Forum Site
Name of the Vulnerable Software and Affected Versions: Online Discussion Forum Site 1 affected versions not specified Description: The issue allows unauthenticated attackers to arbitrarily create or update user accounts due to a problem in the save users function. Recommendations: At the moment,...
PT-2022-20988 · Unknown · Zoo Management System
Name of the Vulnerable Software and Affected Versions: Zoo Management System version 1.0 Description: The issue is related to Cross Site Scripting XSS in the Zoo Management System. The vulnerability can be exploited via the "zms/admin/public html/save animal?an id=24" API endpoint, specifically...
Sourcecodester Online Discussion Forum Site 跨站请求伪造漏洞
Sourcecodester Online Discussion Forum Site is an application of Sourcecodester. An online discussion forum. A security vulnerability in Sourcecodester Online Discussion Forum Site version 1.0, which stems from an issue in the saveusers function, allows an unauthenticated attacker to arbitrarily...
Zoo Management System 跨站脚本漏洞
Zoo Management System is a zoo management system. v1.0 of Zoo Management System has a cross-site scripting vulnerability, which originates from zms/admin/publichtml/saveanimal?anid=24 vulnerability. An attacker could exploit this vulnerability to conduct cross-site scripting attacks...
PowerJob 安全漏洞
PowerJob is an open source distributed computing and job scheduling framework that allows developers to easily schedule tasks in their own applications. a security vulnerability exists in PowerJob 3.2.2 and prior versions. An attacker could exploit the vulnerability to change an arbitrary user...
Sourcecodester Online Discussion Forum Site 跨站脚本漏洞
Sourcecodester Online Discussion Forum Site is an application of Sourcecodester. An online discussion forum. A cross-site scripting vulnerability exists in Sourcecodester Online Discussion Forum Site v1.0, which originates from /odfs/classes/Master.php?f=savecategory, name missing data filtering...
CVE-2022-2019
A vulnerability classified as critical was found in SourceCodester Prison Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php?f=save of the component New User Creation. The manipulation leads to improper authorization. The attack can be...
PT-2022-14417 · Sourcecodester · Sourcecodester Prison Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Prison Management System version 1.0 Description: A critical issue was found in the New User Creation component, specifically in the /classes/Users.php?f=save file, which leads to improper authorization. This issue can be...
Stored XSS in Task field
Description The application Titra is vulnerable to Stored XSS in Task field. Steps To Reproduce 1. Click on add Track button 2. In the Task field enter the payload " 3. click save 4. Now Click on Details 5. XSS will be triggered Image PoC...
Formula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File
Description Formula Injection/CSV Injection in "Task" due to Improper Neutralization of Formula Elements in CSV File. Proof of Concept 1. Click on plus track button 2. Under the task input field enter the payloads =1+1 3. Now enter the work hour as 2 4. Then click on save 5. Now go to details and...
CVE-2022-32019
Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via car-rental-management-system/admin/ajax.php?action=savecar...
CVE-2022-32019
Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via car-rental-management-system/admin/ajax.php?action=savecar...
CVE-2022-29647
An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do...
Car Rental Management System 代码问题漏洞
Car Rental Management System v1.0 contains an arbitrary code execution vulnerability that can be exploited to execute arbitrary code via car-rental-management-system/admin/ajax. php?action=savecar to execute arbitrary code...
mariadb: save_window_function_values triggers an abort during IN subquery
savewindowfunctionvalues in MariaDB before 10.6.3 allows an application crash because of incorrect handling of withwindowfunc=true for a subquery...
The vulnerability of the SaveConfigFile function of the RACompare service in the FactoryTalk AssetCentre software allows a perpetrator to execute arbitrary commands.
The vulnerability of the SaveConfigFile function in the RACompare service of the FactoryTalk AssetCentre software exists because measures to neutralize the special elements used in the operating system commands are not taken. Exploiting this vulnerability allows a malicious actor to execute...
CVE-2022-29096
Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in saveGroupConfigurations page. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser ...