Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Parking Management System 1.0. This affects an unknown part of the file /cispms/admin/category. The manipulation of the argument vehicletype with the input "alert"XSS" leads to cross site scripting. It is...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Simple Parking Management System 1.0. Affected by this issue is some unknown functionality of the file /cispms/admin/search/searching/. The manipulation of the argument search with the input "alert"XSS" leads t...

CVE-2022-2364 SourceCodester Simple Parking Management System category cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Parking Management System 1.0. This affects an unknown part of the file /cispms/admin/category. The manipulation of the argument vehicletype with the input "alert"XSS" leads to cross site scripting. It is...

CVE-2022-2364 SourceCodester Simple Parking Management System category cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Parking Management System 1.0. This affects an unknown part of the file /cispms/admin/category. The manipulation of the argument vehicletype with the input "alert"XSS" leads to cross site scripting. It is...

CVE-2022-2364

CVE-2022-2364 affects SourceCodester Simple Parking Management System 1.0. The vulnerability is a cross-site scripting (XSS) flaw in the /ci_spms/admin/category path, triggered by manipulating the vehicle_type argument with a payload such as “>”. It is described as exploitable remotely and the...

CVE-2022-2363 SourceCodester Simple Parking Management System cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Simple Parking Management System 1.0. Affected by this issue is some unknown functionality of the file /cispms/admin/search/searching/. The manipulation of the argument search with the input "alert"XSS" leads t...

CVE-2022-2363

CVE-2022-2363 affects SourceCodester Simple Parking Management System 1.0. The vulnerability exists in the /ci_spms/admin/search/searching/ functionality, where input for the parameter search can be manipulated to inject a script, causing cross-site scripting (XSS). The public exploit indicates r...

CVE-2022-2293

A vulnerability classified as problematic was found in SourceCodester Simple Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /cissms/index.php/orders/create. The manipulation of the argument customername with the input alert"XSS" leads to cross...

Cross site scripting

A vulnerability classified as problematic was found in SourceCodester Simple Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /cissms/index.php/orders/create. The manipulation of the argument customername with the input alert"XSS" leads to cross...

CVE-2022-2293

CVE-2022-2293 affects SourceCodester Simple Sales Management System 1.0. The vulnerability is a cross-site scripting flaw in an unknown functionality of the file /ci_ssms/index.php/orders/create, caused by manipulating the customer_name parameter. The public exploit is available, and the attack c...

CVE-2022-2293 SourceCodester Simple Sales Management System create cross site scripting

A vulnerability classified as problematic was found in SourceCodester Simple Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /cissms/index.php/orders/create. The manipulation of the argument customername with the input alert"XSS" leads to cross...

CVE-2022-2293 SourceCodester Simple Sales Management System create cross site scripting

A vulnerability classified as problematic was found in SourceCodester Simple Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /cissms/index.php/orders/create. The manipulation of the argument customername with the input alert"XSS" leads to cross...

Simple Sales Management System 跨站脚本漏洞

Simple Sales Management System is a simple sales management system by Carlo Montero Personal Developer. A cross-site scripting vulnerability exists in Simple Sales Management System version 1.0. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...

CVE-2022-31510

The sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31510

The sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31510

The sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

Path traversal

The sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31510

The CVE-2022-31510 entry concerns the sergeKashkin/Simple-RAT repository (before 2022-05-03) where an unsafe use of Flask send_file enables absolute path traversal. The root cause is improper handling of file paths in the Flask call, leading to potential access to arbitrary files on the server. T...

CVE-2022-24809

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a GET-NEXT to the nsVacmAccessTable to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong...

UBUNTU-CVE-2022-24809

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a GET-NEXT to the nsVacmAccessTable to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong...