Cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality of the file adminHome.php. The manipulation of the argument aboutinfo leads to cross site scripting. The attack may be launched...

Sql injection

A vulnerability classified as critical was found in code-projects Simple Art Gallery 1.0. Affected by this vulnerability is an unknown functionality of the file adminHome.php. The manipulation of the argument reachcity leads to sql injection. The attack can be launched remotely. The exploit has...

CVE-2023-1500 code-projects Simple Art Gallery adminHome.php cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality of the file adminHome.php. The manipulation of the argument aboutinfo leads to cross site scripting. The attack may be launched...

CVE-2023-1500 code-projects Simple Art Gallery adminHome.php cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality of the file adminHome.php. The manipulation of the argument aboutinfo leads to cross site scripting. The attack may be launched...

CVE-2023-1500

CVE-2023-1500 affects code-projects Simple Art Gallery 1.0. Affected is the file adminHome.php where manipulation of the parameter about_info enables a cross-site scripting (XSS) . The issue is exploitable remotely, with public disclosure of the exploit reported in multiple sources. The CVE entri...

CVE-2023-1499 code-projects Simple Art Gallery adminHome.php sql injection

A vulnerability classified as critical was found in code-projects Simple Art Gallery 1.0. Affected by this vulnerability is an unknown functionality of the file adminHome.php. The manipulation of the argument reachcity leads to sql injection. The attack can be launched remotely. The exploit has...

CVE-2023-1499

The CVE-2023-1499 issue affects code-projects Simple Art Gallery 1.0, where the adminHome.php function handling the reach_city parameter is vulnerable to SQL injection. The vulnerability is triggered remotely and exploitation has been disclosed publicly. Connected sources consistently cite a SQL ...

Out-of-bounds

A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. It has been rated as critical. This issue affects some unknown processing of the file uploaderm.php. The manipulation of the argument submit leads to unrestricted upload. The attack may be initiated remotely. Th...

PT-2023-17035 · Unknown · Code-Projects Simple Art Gallery

Name of the Vulnerable Software and Affected Versions: code-projects Simple Art Gallery version 1.0 Description: A critical vulnerability was found in the code-projects Simple Art Gallery. The issue affects an unknown functionality of the file adminHome.php. The manipulation of the reach city...

Simple Art Gallery 跨站脚本漏洞

Simple Art Gallery is an art gallery application from Simple Art Gallery, Inc. code-projects A cross-site scripting vulnerability exists in Simple Art Gallery version 1.0, which stems from a problem with an unknown function in the file adminHome.php, where manipulation of the parameter aboutinfo...

Simple Art Gallery SQL注入漏洞

Simple Art Gallery is an art gallery application from Simple Art Gallery, Inc. code-projects An SQL injection vulnerability exists in Simple Art Gallery version 1.0, which stems from a problem with an unknown function in the file adminHome.php, where manipulation of the parameter reachcity can...

CVE-2023-26905

An issue was discovered in Alphaware - Simple E-Commerce System v1.0. There is a SQL injection that can directly issue instructions to the background database system via /alphaware/details.php?id...

CVE-2023-1479

A vulnerability classified as critical has been found in SourceCodester Simple Music Player 1.0. Affected is an unknown function of the file savemusic.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-1479

A vulnerability classified as critical has been found in SourceCodester Simple Music Player 1.0. Affected is an unknown function of the file savemusic.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been...

Design/Logic Flaw

A vulnerability classified as critical has been found in SourceCodester Simple Music Player 1.0. Affected is an unknown function of the file savemusic.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-1479 SourceCodester Simple Music Player save_music.php unrestricted upload

A vulnerability classified as critical has been found in SourceCodester Simple Music Player 1.0. Affected is an unknown function of the file savemusic.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-1479

The CVE-2023-1479 entry concerns SourceCodester Simple Music Player 1.0. The vulnerability is in the file save_music.php where manipulation of the filename parameter allows unrestricted uploads. This can be exploited remotely and has been publicly disclosed (VDB-223362). Multiple connected source...

Simple Music Player 代码问题漏洞

Simple Music Player is a simple music player by the individual developer Carlo Montero. A code issue vulnerability exists in SourceCodester Simple Music Player version 1.0, which stems from a problem with the file savemusic.php, where manipulation of the parameter filename can lead to unrestricte...

PT-2023-17016 · Sourcecodester · Sourcecodester Simple Music Player

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Music Player version 1.0 Description: A critical issue has been found in the software, affecting an unknown function of the file save music.php. The manipulation of the filename argument leads to unrestricted upload. Thi...

WordPress WP Simple Events Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software WP Simple Events Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24376 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 268257560db4 Credits Nithissh S Required...