CVE-2022-35142

An issue in Renato v0.17.0 allows attackers to cause a Denial of Service DoS via a crafted payload injected into the Search parameter...

CVE-2022-35142

An issue in Renato v0.17.0 allows attackers to cause a Denial of Service DoS via a crafted payload injected into the Search parameter...

Design/Logic Flaw

An issue in Renato v0.17.0 allows attackers to cause a Denial of Service DoS via a crafted payload injected into the Search parameter...

CVE-2022-35142

An issue in Renato v0.17.0 allows attackers to cause a Denial of Service DoS via a crafted payload injected into the Search parameter...

Renato 授权问题漏洞

Renato is an open source knowledge base platform that uses static Markdown files to power your knowledge base. A security vulnerability exists in Renato version v0.17.0, which stems from a vulnerability that allows an attacker to inject a crafted payload via the Search parameter, which can be...

PT-2022-4023 · Jenkins · Jenkins Lucene-Search Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Lucene-Search Plugin versions 370.v62a5f618cd3a and earlier Description: The issue exists due to the lack of protection for the web page structure. Exploitation of this issue may allow a remote attacker to conduct a cross-site scripti...

Simple Parking Management System 跨站脚本漏洞

Simple Parking Management System is a simple parking management system. A cross-site scripting vulnerability exists in Simple Parking Management System version 1.0, which originates from a cross-site scripting operation using the input "alert"XSS" for a parameter search. An attacker could exploit...

Directory Management System SQL Injection Vulnerability (CNVD-2022-58311)

Directory Management System is a directory management system by Anuj Kumar, a personal developer. A security vulnerability exists in Directory Management System v1.0, which can be exploited by an attacker to perform a SQL injection attack via the searchdata parameter in search-dirctory.php...

Sql injection

Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter in search-dirctory.php...

CVE-2022-31382

Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter in search-dirctory.php...

WordPress plugin Google Tag Manager 跨站脚本漏洞

WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin Google Tag Manager version 1.15 has a cross-site scripting vulnerability that stems from the fact that site searches are n...

PT-2022-14060

Name of the Vulnerable Software and Affected Versions Google Tag Manager for WordPress plugin for WordPress versions up to and including 1.15 Description The issue is related to reflected Cross-Site Scripting via the s parameter, which is caused by insufficient sanitization in the site search...

CVE-2022-32016

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bycompany...

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar SQL注入漏洞

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar an e-commerce project. ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0 is vulnerable to SQL injection, which stems from The keyword parameter of the searchproduct.php page lacks validation for external input SQL statements. An...

Online Food Ordering System SQL Injection Vulnerability

Online Food Ordering System is an online food ordering system designed primarily for use in the food delivery industry.Online Food Ordering System version 1.0 is vulnerable to a SQL injection vulnerability in the /online-food-order/food-search.php search parameter in...

CVE-2022-29650

Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php...

CVE-2022-29650

Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php...

Sql injection

Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php...

Online Food Ordering System SQL注入漏洞

Online Food Ordering System is an online food ordering system designed primarily for use in the food delivery industry.Online Food Ordering System version 1.0 is vulnerable to a SQL injection vulnerability in the /online-food-order/food-search.php search parameter in...

GHSA-WG4M-VVP6-2HC5 SilverStripe vulnerable to Cross-site Scripting

Multiple cross-site scripting XSS vulnerabilities in SilverStripe before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via 1 the CommenterURL parameter to PostCommentForm, and in the Forum module before 0.2.5 in SilverStripe before 2.3.5 allow remote attackers to inject...