53 matches found
CVE-2022-4401
CVE-2022-4401 affects pallidlight online-course-selection-system. The issue is a cross-site scripting flaw in an unknown function, enabling remote exploitation over a network. Root cause described as manipulation leading to XSS; impact is limited to confidentiality/integrity (per sources), with n...
CVE-2022-4401 pallidlight online-course-selection-system cross site scripting
A vulnerability was found in pallidlight online-course-selection-system. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-215268...
CVE-2022-4401: Improper Neutralization
A vulnerability was found in pallidlight online-course-selection-system. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-215268...
CVE-2022-4401 pallidlight online-course-selection-system cross site scripting
A vulnerability was found in pallidlight online-course-selection-system. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-215268...
CVE-2021-28174 Mitake Smart Stock Selection System - Broken Authentication
Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login...
CVE-2021-28174
Mitake smart stock selection system is affected by CVE-2021-28174, a broken authentication vulnerability where URL parameter manipulation lets remote attackers obtain privileged access to transaction records and perform fraudulent trading without login. The available documents describe the vulner...
CVE-2021-28174: Improper Authentication
Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login...
Mitake Smart Stock Selection System Authorization Issues Vulnerability
Mitake Information Mitake smart stock selection system is an application system of China-based Mitake Information Corporation. A security vulnerability exists in the Mitake smart stock selection system, which can be exploited by an attacker to gain privileged access to transaction records and...
PT-2021-17790
Name of the Vulnerable Software and Affected Versions: Mitake smart stock selection system affected versions not specified Description: The issue allows remote attackers to gain privileged permissions by manipulating parameters in the URL, enabling access to transaction records and fraudulent...
Arbitrary File Deletion Vulnerability in Zhirui School Course Selection System
Zhirui school course selection system positioning school education development system, specialized for secondary schools, colleges and universities students online course selection, results query system, for the integrated campus information system. Zhirui School Selection System has an arbitrary...
SQL Injection Vulnerability in University Worry-Free Online Course Selection System
School Worry-Free Online Course Selection System is designed to solve the problem of cumbersome work brought about by students' independent course selection by selecting courses online and completing personal course selection information, replacing the manual operation with paper. The system is...
SQL Injection Vulnerability in Zhirui School Course Selection System
Zhirui school course selection system positioning school education development system, specialized for secondary schools, colleges and universities students online course selection, results query system, for the integrated campus information system. Zhirui School Selection System suffers from SQL...
SQL Injection Vulnerability in Zhirui School Course Selection System
Zhirui school course selection system positioning school education development system, specialized for secondary schools, colleges and universities students online course selection, results query system, for the integrated campus information system. Zhirui School Selection System suffers from SQL...