CVE-2022-32366

CVE-2022-32366 concerns Product Show Room Site v1.0, where a SQL injection vulnerability exists in the PHP file /psrs/admin/fields/view_field.php?id=. Connected records consistently describe SQL injection in this endpoint, indicating improper handling of the id parameter that allows arbitrary SQL...

CVE-2022-32367

Product Show Room Site v1.0 is explicitly identified as vulnerable to SQL injection via the parameter in the URL /psrs/admin/?page=inquiries/view_inquiry&id=. The CVE entry notes an SQLi vulnerability without providing patch details; the root cause is described by mirrored records as an unsafe SQ...

CVE-2022-32367

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=inquiries/viewinquiry&id=...

Product Show Room Site SQL注入漏洞

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from the /psrs/admin/?page=user/manageuser&id= page. SQL injection problem. No detailed vulnerability details are...

Product Show Room Site SQL注入漏洞

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from the /psrs/admin/categories/viewcategory.php?id = A SQL injection issue exists in the page, which can be exploited ...

Product Show Room Site SQL注入漏洞

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from /psrs/classes/Master.php?f=deletecategory The page lacks validation for external input SQL statements, which can b...

Product Show Room Site SQL注入漏洞

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to a SQL injection vulnerability that originates in /psrs/admin/fields/viewfield.php?id=page. SQL injection problem, an attacker can use this vulnerabilit...

MAL-2022-5182 Malicious code in package-show (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 443ae5878aeef65b3fcccbbd8aabfd6f07127a425a1715c4d20269b72f288b96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in package-show (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 443ae5878aeef65b3fcccbbd8aabfd6f07127a425a1715c4d20269b72f288b96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Product Show Room Site跨站脚本漏洞

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to cross-site scripting, which stems from the fact that entering a special string into the Message text box leads to cross-site scripting. No details of t...

Product Show Room Site Cross-Site Scripting Vulnerability (CNVD-2022-48964)

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to cross-site scripting, which stems from using a special string input text box that leads to cross-site scripting. No details of the vulnerability are...

CVE-2022-1979

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the input alert1 leads to cross site scripting. The attack can be initiated remotely but requires...

CVE-2022-1980

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=systeminfo/contactinfo. The manipulation of the textbox Telephone with the input alert1 leads to cross site scripting. The attack may be initiated...

CVE-2022-1979

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the input alert1 leads to cross site scripting. The attack can be initiated remotely but requires...

CVE-2022-1980

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=systeminfo/contactinfo. The manipulation of the textbox Telephone with the input alert1 leads to cross site scripting. The attack may be initiated...

Cross site scripting

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=systeminfo/contactinfo. The manipulation of the textbox Telephone with the input alert1 leads to cross site scripting. The attack may be initiated...

Cross site scripting

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the input alert1 leads to cross site scripting. The attack can be initiated remotely but requires...

CVE-2022-1980

CVE-2022-1980 affects SourceCodester Product Show Room Site 1.0. The vulnerability is a stored cross-site scripting (XSS) in the /admin/?page=system_info/contact_info Telephone input, where injecting is reflected in the application. The issue requires authentication to exploit and can be trigger...

CVE-2022-1979 SourceCodester Product Show Room Site p=contact cross site scripting

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the input alert1 leads to cross site scripting. The attack can be initiated remotely but requires...

CVE-2022-1979

SourceCodester Product Show Room Site 1.0 is affected by a stored XSS in the p=contact Message textbox. The vulnerability allows injection of and can be triggered remotely, but the initial descriptions state authentication is required. Exploit details have been disclosed publicly. The connected ...