7 matches found
CVE-2025-9753
A vulnerability was detected in Campcodes Online Hospital Management System 1.0. The affected element is an unknown function of the file /admin/patient-search.php of the component Patient Search Module. Performing manipulation of the argument Search by Name Mobile No results in cross site...
CVE-2025-3323 godcheese/code-projects Nimrod ViewMenuCategoryRestController.java searchAllByName sql injection
A vulnerability classified as critical was found in godcheese/code-projects Nimrod 0.8. Affected by this vulnerability is the function searchAllByName of the file ViewMenuCategoryRestController.java. The manipulation of the argument Name leads to sql injection. The attack can be launched remotely...
Jirafeau Cross-Site Request Forgery Vulnerability
Jirafeau is a file sharing website system. A cross-site request forgery vulnerability exists in the administration panel in Jirafeau versions prior to 3.4.1. A remote attacker can exploit this vulnerability to force an administrator to perform a file lookup operation and perform a cross-site...
CVE-2018-11350
An issue was discovered in Jirafeau before 3.4.1. The file "search by name" form is affected by one Cross-Site Scripting vulnerability via the name parameter...
PT-2018-10509
Name of the Vulnerable Software and Affected Versions Jirafeau versions prior to 3.4.1 Description An issue was discovered in the file "search by name" form, which is affected by a Cross-Site Scripting vulnerability via the name parameter. Recommendations For versions prior to 3.4.1, update to...
PT-2018-10507
Name of the Vulnerable Software and Affected Versions Jirafeau versions prior to 3.4.1 Description The administration panel is susceptible to three CSRF attacks on search functionalities, specifically search by name, search by hash, and search link. Recommendations For versions prior to 3.4.1,...
CVE-2018-11350: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Jirafeau before 3.4.1. The file "search by name" form is affected by one Cross-Site Scripting vulnerability via the name parameter...