Simple Inventory System SQL注入漏洞

Simple Inventory System is an inventory system. version 1.0 of Simple Inventory System is vulnerable to SQL injection, which can be exploited by attackers to conduct SQL injection attacks via /inventory/tableeditajax.php...

Simple Inventory System SQL注入漏洞

Simple Inventory System is an inventory system. version 1.0 of Simple Inventory System is vulnerable to SQL injection attacks via /inventory/login.php...

CVE-2022-31339

CVE-2022-31339 affects the Simple Inventory System v1.0, with a vulnerability in the login.php path that enables SQL injection. Multiple connected records (NVD, Red Hat, CNVD, CNNVD, CVE lists) confirm the vulnerability vector is via /inventory/login.php, indicating the issue resides in the login...

CVE-2022-31340

CVE-2022-31340 affects Simple Inventory System v1.0 and is due to a SQL Injection vulnerability in /inventory/table_edit_ajax.php. The Red Hat, CNVD, CNNVD and other feeds corroborate a SQLi issue in this exact path/component. CVSS data indicate a high-severity impact (high confidentiality, integ...

CVE-2022-30817

CVE-2022-30817 concerns the Simple Bus Ticket Booking System 1.0, with a vulnerability described as a SQL injection in the request path /SimpleBusTicket/index.php. Connected sources confirm this vulnerability across multiple feeds (NVD/Red Hat/CNVD/CNNVD, etc.), indicating the flaw affects the ap...

Malicious code in simple-project-pkg-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36656e6b75ae254df7a6e2a5d6664fe017a1357d328c429930e852e963f4dca3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6122 Malicious code in simple-project-pkg-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36656e6b75ae254df7a6e2a5d6664fe017a1357d328c429930e852e963f4dca3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-1646

CVE-2022-1646 affects the WordPress plugin Simple Real Estate Pack (versions

ALPINE-CVE-2022-22576

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocol...

Lumidek Associates Simple Food Website Cross-Site Request Forgery Vulnerability

Lumidek Associates Simple Food Website is a Simple Food Website CMS. version 1.0 of Lumidek Associates Simple Food Website is vulnerable to cross-site request forgery, which stems from a WEB application that does not adequately validate that the request is from a trusted user. An attacker could...

GHSA-29MR-GR4C-VF9C Magento 2 Community Edition XSS Vulnerability

A reflected cross-site scripting XSS vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can inject arbitrary JavaScript code when adding an image for during simple product creation...

CVE-2022-30460

Simple Social Networking Site v1.0 is vulnerable to Cross Site Scripting XSS via /sns/classes/Users.php?f=save, firstname...

CVE-2022-30460

Simple Social Networking Site v1.0 is vulnerable to Cross Site Scripting XSS via /sns/classes/Users.php?f=save, firstname...

CVE-2022-30460

CVE-2022-30460 affects Simple Social Networking Site v1.0. A stored XSS flaw arises in the /sns/classes/Users.php?f=save endpoint via the firstname parameter. The CNNVD entry explicitly calls it stored XSS; CVSS metrics (NVD) show base scores of 3.5 (v2.0) / 5.4 (v3.1), indicating a low to medium...

Simple Social Networking Site 跨站脚本漏洞

Simple Social Networking Site is a social networking site by Carlo Montero Personal Developer. A security vulnerability exists in version 1.0 of Simple Social Networking Site, which originates from a /sns/classes/Users.php?f=save, firstname stored cross-site scripting XSS attack...

CVE-2022-30015

In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any of the fields on http://127.0.0.1:1234/food/admin/allusers.php like Full Username, etc .This causes stored xss...

CVE-2022-30015

In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any of the fields on http://127.0.0.1:1234/food/admin/allusers.php like Full Username, etc .This causes stored xss...

CVE-2022-30015

In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any of the fields on http://127.0.0.1:1234/food/admin/allusers.php like Full Username, etc .This causes stored xss...

Cross site scripting

In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any of the fields on http://127.0.0.1:1234/food/admin/allusers.php like Full Username, etc .This causes stored xss...

CVE-2022-30015

In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any of the fields on http://127.0.0.1:1234/food/admin/allusers.php like Full Username, etc .This causes stored xss...