5885 matches found
Sourcecodester Online Discussion Forum Site – Cross-Site Request Forgery Vulnerability
Sourcecodester Online Discussion Forum Site is an application of Sourcecodester. An online discussion forum. A security vulnerability in Sourcecodester Online Discussion Forum Site version 1.0, which stems from an issue in the saveusers function, allows an unauthenticated attacker to arbitrarily...
PT-2022-20988 · Unknown · Zoo Management System
Name of the Vulnerable Software and Affected Versions: Zoo Management System version 1.0 Description: The issue is related to Cross Site Scripting XSS in the Zoo Management System. The vulnerability can be exploited via the "zms/admin/public html/save animal?an id=24" API endpoint, specifically...
PT-2022-20670 · Online Discussion Forum Site +1 · Online Discussion Forum Site
Name of the Vulnerable Software and Affected Versions: Online Discussion Forum Site 1 affected versions not specified Description: The issue allows unauthenticated attackers to arbitrarily create or update user accounts due to a problem in the save users function. Recommendations: At the moment,...
Sourcecodester Online Discussion Forum Site – Cross-site Scripting Vulnerabilities
Sourcecodester Online Discussion Forum Site is an application of Sourcecodester. An online discussion forum. A cross-site scripting vulnerability exists in Sourcecodester Online Discussion Forum Site v1.0, which originates from /odfs/classes/Master.php?f=savecategory, name missing data filtering...
CVE-2022-2019
A vulnerability classified as critical was found in SourceCodester Prison Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php?f=save of the component New User Creation. The manipulation leads to improper authorization. The attack can be...
PT-2022-14417 · Sourcecodester · Sourcecodester Prison Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Prison Management System version 1.0 Description: A critical issue was found in the New User Creation component, specifically in the /classes/Users.php?f=save file, which leads to improper authorization. This issue can be...
Stored XSS in Task field
Description The application Titra is vulnerable to Stored XSS in Task field. Steps To Reproduce 1. Click on add Track button 2. In the Task field enter the payload " 3. click save 4. Now Click on Details 5. XSS will be triggered Image PoC...
Formula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File
Description Formula Injection/CSV Injection in "Task" due to Improper Neutralization of Formula Elements in CSV File. Proof of Concept 1. Click on plus track button 2. Under the task input field enter the payloads =1+1 3. Now enter the work hour as 2 4. Then click on save 5. Now go to details and...
CVE-2022-32019
Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via car-rental-management-system/admin/ajax.php?action=savecar...
CVE-2022-32019
Car Rental Management System v1.0 is vulnerable to Arbitrary code execution via car-rental-management-system/admin/ajax.php?action=savecar...
CVE-2022-29647
An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do...
Car Rental Management System Code Vulnerabilities
Car Rental Management System v1.0 contains an arbitrary code execution vulnerability that can be exploited to execute arbitrary code via car-rental-management-system/admin/ajax. php?action=savecar to execute arbitrary code...
PT-2022-21047
Name of the Vulnerable Software and Affected Versions Car Rental Management System version 1.0 Description The issue allows for arbitrary code execution via the "car-rental-management-system/admin/ajax.php?action=save car" API endpoint. Recommendations For Car Rental Management System version 1.0...
PT-2022-21048
Name of the Vulnerable Software and Affected Versions Car Rental Management System version 1.0 Description The issue allows for arbitrary code execution via the "ip/car-rental-management-system/admin/ajax.php?action=save settings" API endpoint. Recommendations For Car Rental Management System...
mariadb: save_window_function_values triggers an abort during IN subquery
savewindowfunctionvalues in MariaDB before 10.6.3 allows an application crash because of incorrect handling of withwindowfunc=true for a subquery...
CVE-2022-29096
Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in saveGroupConfigurations page. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser ...
FactoryTalk AssetCentre SaveConfigFile Arbitrary Command Execution
The vulnerability of the SaveConfigFile function in the RACompare service of the FactoryTalk AssetCentre software exists because measures to neutralize the special elements used in the operating system commands are not taken. Exploiting this vulnerability allows a malicious actor to execute...
CVE-2022-30474
Tenda AC Series Router AC18V15.03.05.196318 was discovered to contain a heap overflow in the httpd module when handling /goform/saveParentControlInfo request...