5869 matches found
CVE-2025-3297
A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /classes/Master.php?f=saveproduct. The manipulation of the argument brand leads to cross site scripting. It is possible to launch the attack...
CVE-2025-3173
A vulnerability, which was classified as critical, was found in Project Worlds Online Lawyer Management System 1.0. Affected is an unknown function of the file /savebooking.php. The manipulation of the argument lawyerid/description leads to sql injection. It is possible to launch the attack...
CVE-2025-3173 Project Worlds Online Lawyer Management System save_booking.php sql injection
A vulnerability, which was classified as critical, was found in Project Worlds Online Lawyer Management System 1.0. Affected is an unknown function of the file /savebooking.php. The manipulation of the argument lawyerid/description leads to sql injection. It is possible to launch the attack...
Exploit for SQL Injection in Glpi-Project Glpi
CVE-2025-24799 SQLi Scanner A fast SQL injection vulnerabilit...
Cross-site Scripting (XSS)
Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the Save function. An attacker with page editing privileges can inject malicious HTML content by manipulating the content argument. Details Cross-site...
PT-2025-13642
Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A problematic issue affects the Save function of the Feature Link Block Handler component. The manipulation of the Title/Body Source/Button Text argument leads to cross-site scripting. This issue ca...
PT-2025-13636
Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A problematic issue was found in the function Save of the component FAQ Block Handler. The manipulation of the argument Navigation/Title Text/Description Source leads to cross-site scripting. It is...
PT-2025-13639
Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A vulnerability was found in ConcreteCMS, affecting the Save function of the HTML Block Handler component. The manipulation of the content argument leads to HTML injection. This issue can be initiat...
PT-2025-13640
Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A vulnerability was found in ConcreteCMS that affects the function Save of the component Feature Block Handler. The manipulation of the argument Paragraph Source leads to cross-site scripting. The...
PT-2025-13638
Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A vulnerability was found in the function Save of the component Content Block Handler, where the manipulation of the argument Source leads to cross-site scripting. The attack may be launched remotel...
Path Traversal
agentscope is vulnerable to Path Traversal. The vulnerability is due to improper validation of file paths in the save-workflow and load-workflow functionality, allowing an attacker to read and write arbitrary JSON files on the filesystem...
Malicious code in blockzie-save-svg-as-png (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12218d7a2fc38f96f07e686aaf4c4e5a76506d1dd69cdb9a90ab2e1346e36e0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2651 Malicious code in blockzie-save-svg-as-png (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12218d7a2fc38f96f07e686aaf4c4e5a76506d1dd69cdb9a90ab2e1346e36e0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
How to Delete Duplicate Photos on iPhone to Save Storage
Learn the easiest way to delete duplicate photos on your iPhone device with our simple, step-by-step guide...
CVE-2025-2655
A vulnerability was detected in SourceCodester AC Repair and Services System 1.0. The affected element is the function saveusers/deleteusers of the file /classes/Users.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The...
CVE-2025-2624
A vulnerability was found in westboy CicadasCMS 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /system/cms/content/save. The manipulation of the argument content/fujian/laiyuan leads to sql injection. The attack may be launched remotely. The...
CVE-2025-2623
A vulnerability was found in westboy CicadasCMS 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /system/cms/content/save. The manipulation of the argument title/content/laiyuan leads to cross site scripting. The attack can be launch...
PT-2025-12498
Name of the Vulnerable Software and Affected Versions westboy CicadasCMS version 1.0 Description A vulnerability was found in the software, affecting an unknown functionality of the file /system/cms/content/save. The manipulation of the argument title/content/laiyuan leads to cross-site scripting...