EUVD-2022-25247

Malicious code in bioql PyPI...

EUVD-2022-25248

Malicious code in bioql PyPI...

CVE-2024-33302

SourceCodester Product Show Room 1.0 and before is vulnerable to Cross Site Scripting XSS via "Middle Name" under Add Users...

CVE-2024-33304

SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "Last Name" under Add Users...

CVE-2022-1980

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=systeminfo/contactinfo. The manipulation of the textbox Telephone with the input leads to cross site scripting. The attack may be initiated remotely b...

CVE-2022-1979

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the input leads to cross site scripting. The attack can be initiated remotely but requires authentication...

CVE-2024-33302

CVE-2024-33302 affects SourceCodester Product Show Room 1.0 and earlier. The vulnerability is a cross-site scripting (XSS) flaw in the Middle Name field under Add Users, enabling script injection. Per the CVSS data, the attack vector is local with low privileges, no user interaction required, and...

CVE-2024-33303

CVE-2024-33303 affects SourceCodester Product Show Room 1.0 with a Cross Site Scripting (XSS) vulnerability exploitable via the First Name field under Add Users. The NVD entry lists CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N with base score 8.2 (HIGH); impact is confidentiality high, integrit...

CVE-2024-33304

SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "Last Name" under Add Users...

CVE-2022-1979

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the input alert1 leads to cross site scripting. The attack can be initiated remotely but requires...

CVE-2022-1979 SourceCodester Product Show Room Site p=contact cross site scripting

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the input alert1 leads to cross site scripting. The attack can be initiated remotely but requires...