59 matches found
PT-2023-20380 · Sourcecodester · Sourcecodester Billing Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Billing Management System version 1.0 Description: A critical issue has been found in the SourceCodester Billing Management System, affecting an unknown functionality of the file ajax service.php of the component POST Parameter...
Cross-Site Scripting (XSS)
pimcore/pimcore is vulnerable to Cross-Site-Scripting XSS. The vulnerability exists in the generateLayoutTreeFromArray function in Service.php because the title field is not validated which allows an attacker to inject and execute arbitrary scripts...
PT-2022-18458
Name of the Vulnerable Software and Affected Versions SourceCodester Company Website CMS affected versions not specified Description A critical vulnerability was found in the SourceCodester Company Website CMS, affecting an unknown function of the file /dashboard/add-service.php of the component...
PT-2022-21035
Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/bcms/admin/services/view service.php?id=" API endpoint. The id variable is vulnerable to injection attacks...
PT-2022-21034
Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue allows for SQL Injection via the id parameter in the API endpoint "/admin/services/manage service.php". This could potentially lead to unauthorized access to sensitive data...
PT-2022-20709
Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/ocwbs/admin/services/view service.php?id=" endpoint, specifically through the id variable. No information is...
PT-2022-20708
Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue concerns a SQL injection in the /ocwbs/admin/services/manage service.php endpoint, specifically with the id parameter. This allows for potential unauthorized access and...
PT-2022-19944
Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue concerns SQL Injection. It can be exploited via the /cms/admin/maintenance/manage service.php endpoint, specifically through the id parameter. Recommendations For Simple Client...
CVE-2022-26588
A Cross-Site Request Forgery CSRF in IceHrm 31.0.0.OS allows attackers to delete arbitrary users or achieve account takeover via the app/service.php URI...
CVE-2022-26588
A Cross-Site Request Forgery CSRF in IceHrm 31.0.0.OS allows attackers to delete arbitrary users or achieve account takeover via the app/service.php URI...
CVE-2022-26588: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF in IceHrm 31.0.0.OS allows attackers to delete arbitrary users or achieve account takeover via the app/service.php URI...
PT-2022-17943
Name of the Vulnerable Software and Affected Versions IceHrm version 31.0.0.OS Description A Cross-Site Request Forgery CSRF issue allows attackers to delete arbitrary users or achieve account takeover via the "app/service.php" URI. Recommendations For IceHrm version 31.0.0.OS, as a temporary...
CVE-2021-43509: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the id parameter in view-service.php...
PT-2022-11862
Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Client Management System version 1.0 Description A SQL Injection issue exists via the id parameter in "view-service.php". This allows for potential exploitation. Recommendations For Sourcecodester Simple Client Management...
CVE-2020-9270
ICE Hrm 26.2.0 is vulnerable to CSRF that leads to password reset via service.php...
CVE-2020-9271
ICE Hrm 26.2.0 is vulnerable to CSRF that leads to user creation via service.php...
CVE-2020-9271
ICE Hrm 26.2.0 is vulnerable to CSRF that leads to user creation via service.php...
CVE-2020-9270
ICE Hrm 26.2.0 is vulnerable to CSRF that leads to password reset via service.php...
