74 matches found
CVE-2024-51639
Cross-Site Request Forgery CSRF vulnerability in Hints Naver Blog naver-blog-api allows Stored XSS.This issue affects Naver Blog: from n/a through = 1.0...
CVE-2025-23592
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in animexxx dForms dforms allows Reflected XSS.This issue affects dForms: from n/a through = 1.0...
PT-2025-3953 · Unknown · Campcodes School Management
Name of the Vulnerable Software and Affected Versions: CampCodes School Management Software version 1.0 Description: A problematic vulnerability was found in the Photo Gallery Page component of the software, specifically in an unknown function of the file /photo-gallery. The manipulation of the...
PT-2025-3877 · Unknown · Liujianview Gymxmjpa
Name of the Vulnerable Software and Affected Versions: liujianview gymxmjpa version 1.0 Description: A critical vulnerability has been found in the function SubjectDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/SubjectController.java. The manipulation of the argument subname...
PT-2025-3836 · Unknown · Campcodes Computer Laboratory Management System
Name of the Vulnerable Software and Affected Versions: CampCodes Computer Laboratory Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /class/edit/edit. The manipulation of the e photo argument leads to...
PT-2024-17642 · Sourcecodester · Sourcecodester Kortex Lite Advocate Office Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Kortex Lite Advocate Office Management System version 1.0 Description: A problem has been found in the system, affecting some unknown functionality of the file /control/client data.php. The manipulation of the id argument leads...
PT-2024-17390 · Code Projects · Code-Projects Farmacia
Name of the Vulnerable Software and Affected Versions: code-projects Farmacia version 1.0 Description: A problem has been found in the file /editar-fornecedor.php, affecting some unknown functionality. The manipulation of the cidade argument leads to cross-site scripting. This issue can be...
PT-2024-17226 · Unknown · 1000 Projects Portfolio Management System Mca
Name of the Vulnerable Software and Affected Versions: 1000 Projects Portfolio Management System MCA version 1.0 Description: A critical issue has been found in the /register.php file, affecting an unknown functionality. The manipulation of the argument name leads to SQL injection. This can be...
PHPGurukul Online DJ Booking Management System 安全漏洞
PHPGurukul Online DJ Booking Management System is an online DJ booking management system from PHPGurukul. A security vulnerability exists in PHPGurukul Online DJ Booking Management System v1.0, which originates from a reflected cross-site scripting vulnerability in the searchdata parameter of the...
PT-2024-39100 · Sourcecodester · Sourcecodester Php Crud
Name of the Vulnerable Software and Affected Versions: SourceCodester PHP CRUD version 1.0 Description: A vulnerability was found in the software, classified as problematic. It affects the file /endpoint/update.php, where the manipulation of the first name, middle name, and last name arguments...
PT-2024-38629 · Sourcecodester · Sourcecodester Yoga Class Registration System
Name of the Vulnerable Software and Affected Versions: SourceCodester Yoga Class Registration System version 1.0 Description: A vulnerability was found in the system, classified as problematic, affecting some unknown processing of the file /admin/inquiries/view inquiry.php. The manipulation of th...
PT-2024-25608 · Unknown · E-Negosyo System
Name of the Vulnerable Software and Affected Versions: E-Negosyo System version 1.0 Description: A Cross-Site Scripting XSS issue allows an attacker to partially take over an authenticated user's browser session. This can be achieved by sending a specially crafted JavaScript payload via the id...
PT-2024-38183 · Sourcecodester · Sourcecodester Lot Reservation Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Lot Reservation Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /view model.php. The manipulation of the id argument leads to SQL injectio...
PT-2024-37829 · Unknown · Sourcecodester Student Study Center Desk Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Student Study Center Desk Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown part of the file /Master.php?f=save student. The manipulation of the id argument leads to SQL...
PT-2024-27768 · Envisionware · Envisionware Computer Access & Reservation Control Selfcheck +1
Name of the Vulnerable Software and Affected Versions: EnvisionWare Computer Access & Reservation Control SelfCheck version 1.0 Description: The issue allows unauthenticated attackers on the same network to perform a directory traversal. Recommendations: For EnvisionWare Computer Access &...
Campcodes Complete Online DJ Booking System 跨站脚本漏洞
Campcodes Complete Online DJ Booking System is an online DJ booking system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Online DJ Booking System, which stems from a cross-site scripting vulnerability in the email parameter of the...
PT-2024-19555 · Unknown · Bdtask G-Prescription Gynaecology & Obs Consultation
Name of the Vulnerable Software and Affected Versions: Bdtask G-Prescription Gynaecology & OBS Consultation Software version 1.0 Description: A vulnerability was found in the Password Reset Handler component, specifically affecting some unknown functionality of the file /Setting/change password...
PT-2024-18688 · Sourcecodester · Sourcecodester Petrol Pump Management
Name of the Vulnerable Software and Affected Versions: SourceCodester Petrol Pump Management Software version 1.0 Description: A problematic issue was found in the software, affecting an unknown function of the file /admin/app/profile crud.php. The manipulation of the username argument leads to...
PT-2024-15426 · Unknown · Project Worlds Online Lawyer Management System
Name of the Vulnerable Software and Affected Versions: Project Worlds Online Lawyer Management System version 1.0 Description: A vulnerability has been found in the User Registration component of the system. The manipulation of the First Name argument leads to cross-site scripting. It is possible...
PT-2023-29503 · Unknown · Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the password parameter of the "routers/add-users.php" resource does not validate the characters...