CVE-2022-32367: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=inquiries/viewinquiry&id=...

CVE-2022-32353: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/managefieldorder.php?id=...

CVE-2022-32359: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=deletecategory...

CVE-2022-32362: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/managecategory.php?id=...

CVE-2022-32364: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/manageproduct&id=...

CVE-2022-32354: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=user/manageuser&id=...

CVE-2022-32355: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/viewproduct&id=...

CVE-2022-32358: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=deleteinquiry...

CVE-2022-32365: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/managefield.php?id=...

CVE-2022-32366: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/viewfield.php?id=...

PT-2022-21263

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection, which can be exploited via the /psrs/admin/?page=products/manage product&id= endpoint. The id parameter is vulnerable to this type of attack. No information is...

MAL-2022-5182 Malicious code in package-show (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 443ae5878aeef65b3fcccbbd8aabfd6f07127a425a1715c4d20269b72f288b96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in package-show (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 443ae5878aeef65b3fcccbbd8aabfd6f07127a425a1715c4d20269b72f288b96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Product Show Room Site跨站脚本漏洞

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to cross-site scripting, which stems from the fact that entering a special string into the Message text box leads to cross-site scripting. No details of t...

Product Show Room Site Cross-Site Scripting Vulnerability (CNVD-2022-48964)

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to cross-site scripting, which stems from using a special string input text box that leads to cross-site scripting. No details of the vulnerability are...

CVE-2022-1979

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the input alert1 leads to cross site scripting. The attack can be initiated remotely but requires...

CVE-2022-1980

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=systeminfo/contactinfo. The manipulation of the textbox Telephone with the input alert1 leads to cross site scripting. The attack may be initiated...

CVE-2022-1979

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the input alert1 leads to cross site scripting. The attack can be initiated remotely but requires...

CVE-2022-1980

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=systeminfo/contactinfo. The manipulation of the textbox Telephone with the input alert1 leads to cross site scripting. The attack may be initiated...

Cross site scripting

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=systeminfo/contactinfo. The manipulation of the textbox Telephone with the input alert1 leads to cross site scripting. The attack may be initiated...