PT-2023-19309 · Tuleap · Tuleap

Name of the Vulnerable Software and Affected Versions: Tuleap versions prior to 14.5.99.4 Description: The issue is a cross-site scripting attack that can be injected in the name of a color of select box values of a tracker and then reflected in the tracker administration. Administrative privileg...

[SECURITY] [DLA 3392-1] ruby-rack security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3392-1 [email protected] https://www.debian.org/lts/security/ Scarlett Moore April 17, 2023 https://wiki.debian.org/LTS -...

Sales Tracker Management System SQL Injection Vulnerability (CNVD-2023-29365)

Sales Tracker Management System is a sales tracking management system. Sales Tracker Management System v1.0 is vulnerable to SQL injection. The vulnerability originates from the missing validation of the parameter id of /admin/products/manageproduct.php for external input SQL statements. An...

[SECURITY] [DSA 5385-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5385-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 12, 2023 https://www.debian.org/security/faq -...

CVE-2023-1983

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/products/manageproduct.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

CVE-2023-1983

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/products/manageproduct.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

Sql injection

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/products/manageproduct.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

CVE-2023-1983 SourceCodester Sales Tracker Management System GET Parameter manage_product.php sql injection

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/products/manageproduct.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

CVE-2023-1983

CVE-2023-1983 affects SourceCodester Sales Tracker Management System v1.0. The vulnerability is an SQL injection in the GET parameter handler for /admin/products/manage_product.php, triggered by manipulating the id argument. It can be exploited remotely and has been publicly disclosed. Many conne...

NewStart CGSL CORE 5.05 / MAIN 5.05 : tracker Vulnerability (NS-SA-2023-0020)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has tracker packages installed that are affected by a vulnerability: - It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access ...

PT-2023-17390 · Sourcecodester · Sourcecodester Sales Tracker Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Sales Tracker Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /admin/products/manage product.php, specifically the component GET Parameter Handler. The manipulation of...

CVE-2023-26773

Cross Site Scripting vulnerability found in Sales Tracker Management System v.1.0 allows a remote attacker to gain privileges via the product list function in the Master.php file...

Cross site scripting

Cross Site Scripting vulnerability found in Sales Tracker Management System v.1.0 allows a remote attacker to gain privileges via the product list function in the Master.php file...

[SECURITY] [DLA 3388-1] lldpd security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3388-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb April 10, 2023 https://wiki.debian.org/LTS -...

CVE-2023-26774

An issue found in Sales Tracker Management System v.1.0 allows a remote attacker to access sensitive information via sales.php component of the admin/reports endpoint...

CVE-2023-26774

An issue found in Sales Tracker Management System v.1.0 allows a remote attacker to access sensitive information via sales.php component of the admin/reports endpoint...

Design/Logic Flaw

An issue found in Sales Tracker Management System v.1.0 allows a remote attacker to access sensitive information via sales.php component of the admin/reports endpoint...

[SECURITY] [DLA 3387-2] udisks2 regression update

Debian LTS Advisory DLA-3387-2 [email protected] https://www.debian.org/lts/security/ Tobias Frost April 10, 2023 https://wiki.debian.org/LTS Package : udisks2 Version : 2.8.1-4+deb10u2 Debian Bug : 1034124 A regression was reported that the fix for CVE-2021-3802 broken mounting...

[SECURITY] [DSA 5384-1] openimageio security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5384-1 [email protected] https://www.debian.org/security/ Markus Koschany April 10, 2023 https://www.debian.org/security/faq -...

Medicine Tracker System 1.0 SQL Injection

Exploit Title: Medicine Tracker System v1.0 - Sql Injection Exploit Author: Sanjay Singh Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-mts0.zip Version: V1.0.0 Tested on: Windows/Linux Proof of Concept: 1-...