4744 matches found
Code-Projects Online Restaurant Management System 安全漏洞
Code-Projects Online Restaurant Management System is a Code-Projects open source online restaurant management system. A security vulnerability exists in Code-Projects Online Restaurant Management System version 1.0, which stems from the mishandling of the parameter last in the /admin/membersave.p...
Online Restaurant Management System 安全漏洞
Online Restaurant Management System is a Code-projects open source online restaurant management system. A security vulnerability exists in Online Restaurant Management System version 1.0, which originates from improper handling of the parameter ID in the /admin/paymentsave.php file, which may lea...
Code-Projects Online Restaurant Management System 安全漏洞
Code-Projects Online Restaurant Management System is a Code-Projects open source online restaurant management system. A security vulnerability exists in Code-Projects Online Restaurant Management System version 1.0, which originates from the improper handling of the parameter Category in the file...
Online Restaurant Management System SQL注入漏洞
Online Restaurant Management System is a Code-projects open source online restaurant management system. A SQL injection vulnerability exists in Online Restaurant Management System version 1.0, which originates from improper handling of the parameter mode in the /paymentsave.php file, which may le...
CVE-2025-3298
A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=saveproduct of the component Registration Handler. The manipulation of the argument email leads...
CVE-2025-3297
A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /classes/Master.php?f=saveproduct. The manipulation of the argument brand leads to cross site scripting. It is possible to launch the attack...
CVE-2025-3173
A vulnerability, which was classified as critical, was found in Project Worlds Online Lawyer Management System 1.0. Affected is an unknown function of the file /savebooking.php. The manipulation of the argument lawyerid/description leads to sql injection. It is possible to launch the attack...
CVE-2025-3173 Project Worlds Online Lawyer Management System save_booking.php sql injection
A vulnerability, which was classified as critical, was found in Project Worlds Online Lawyer Management System 1.0. Affected is an unknown function of the file /savebooking.php. The manipulation of the argument lawyerid/description leads to sql injection. It is possible to launch the attack...
Exploit for SQL Injection in Glpi-Project Glpi
CVE-2025-24799 SQLi Scanner A fast SQL injection vulnerabilit...
Cross-site Scripting (XSS)
Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the Save function. An attacker with page editing privileges can inject malicious HTML content by manipulating the content argument. Details Cross-site...
Path Traversal
agentscope is vulnerable to Path Traversal. The vulnerability is due to improper validation of file paths in the save-workflow and load-workflow functionality, allowing an attacker to read and write arbitrary JSON files on the filesystem...
MAL-2025-2651 Malicious code in blockzie-save-svg-as-png (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12218d7a2fc38f96f07e686aaf4c4e5a76506d1dd69cdb9a90ab2e1346e36e0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in blockzie-save-svg-as-png (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12218d7a2fc38f96f07e686aaf4c4e5a76506d1dd69cdb9a90ab2e1346e36e0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
How to Delete Duplicate Photos on iPhone to Save Storage
Learn the easiest way to delete duplicate photos on your iPhone device with our simple, step-by-step guide...
CVE-2025-2655
A vulnerability was detected in SourceCodester AC Repair and Services System 1.0. The affected element is the function saveusers/deleteusers of the file /classes/Users.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The...
CVE-2025-2624
A vulnerability was found in westboy CicadasCMS 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /system/cms/content/save. The manipulation of the argument content/fujian/laiyuan leads to sql injection. The attack may be launched remotely. The...
CVE-2025-2623
A vulnerability was found in westboy CicadasCMS 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /system/cms/content/save. The manipulation of the argument title/content/laiyuan leads to cross site scripting. The attack can be launch...
AgentScope path traversal vulnerability in save-workflow
A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope versions prior to the fix. This vulnerability allows an attacker to read and write arbitrary JSON files on the filesystem, potentially leading to the exposure or modification of...