Sql injection

SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information via a crafted request to the search parameter in the Users module...

WordPress Plugin Advanced Woo Search Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2024-15412 · WordPress · Wp-Advanced-Search +1

Name of the Vulnerable Software and Affected Versions: Advanced Woo Search plugin for WordPress versions up to, and including, 2.96 Description: The issue is related to Reflected Cross-Site Scripting via the search parameter due to insufficient input sanitization and output escaping. This allows...

CVE-2023-7124

A vulnerability, which was classified as problematic, was found in code-projects E-Commerce Site 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument keyword with the input leads to cross site scripting. It is possible to launch the attack remotely. The...

Sql injection

A SQL Injection in the users searching REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows remote authenticated attackers to read database data via SQL commands injected in the search parameter...

CVE-2023-36652

A SQL Injection in the users searching REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows remote authenticated attackers to read database data via SQL commands injected in the search parameter...

CVE-2023-46016

Cross Site Scripting XSS in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'search' parameter in the application URL...

CVE-2023-46016

Cross Site Scripting XSS in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'search' parameter in the application URL...

Cross site scripting

Cross Site Scripting XSS in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'search' parameter in the application URL...

Code-Projects Blood Bank Security Breach

Code-Projects Blood Bank is a blood bank system for the Code-Projects project. A security vulnerability exists in Code-Projects Blood Bank version 1.0, which stems from a Reflected Cross-Site Scripting XSS vulnerability in the parameter search in the file abs.php...

PT-2023-29797 · Unknown · Code-Projects Blood Bank

Name of the Vulnerable Software and Affected Versions: Code-Projects Blood Bank version 1.0 Description: The issue allows attackers to run arbitrary code via the search parameter in the application URL. This is due to a Cross Site Scripting XSS flaw in the abs.php file. Recommendations: For...

AGENCY Cross-Site Scripting Vulnerability

AGENCY is a free application open source by dstar2018. AGENCY 61 and earlier versions suffer from a cross-site scripting vulnerability that stems from the parameter QSType/QuickSearch in the file search.php can lead to cross-site scripting...

Free Hospital Management System SQL Injection Vulnerability

The Free Hospital Management System is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. The Free Hospital Management System suffers from a SQL injection vulnerability that originates from a lack of validation of the...

CVE-2023-45542

Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain sensitive information via a crafted script to the q parameter in the Search function...

mooSocial 跨站脚本漏洞

mooSocial is a multi-platform, mobile-ready, user-friendly script from mooSocial, Inc. for building community-driven content sharing and social networking sites. A cross-site scripting vulnerability exists in mooSocial version 3.1.8, which stems from the application's lack of effective filtering...

CVE-2023-5587

A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /vm/admin/doctors.php of the component Parameter Handler. The manipulation of the argument search leads ...

Hospital Management System SQL注入漏洞

The Free Hospital Management System is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. The Free Hospital Management System suffers from a SQL injection vulnerability that originates from a lack of validation of the...

PT-2023-6327 · Sourcecodester · Sourcecodester Free Hospital Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Free Hospital Management System for Small Practices version 1.0 Description: A critical issue was found in the file /vm/admin/doctors.php of the component Parameter Handler, related to the lack of protection of the SQL query...

CVE-2023-44163 Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

The 'search' parameter of the processsearch.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-44163

CVE-2023-44163 describes a SQL Injection risk in a web application where the search parameter of the process_search.php resource does not validate received characters, sending them unfiltered to the database. The issue enables unauthenticated access with potential impact to confidentiality, integ...