CVE-2026-8785

A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by this vulnerability is the function getAllPatientDetail of the file updateinfo.php of the component GET Parameter Handler. Executing a manipulation of the argument appointmentno can lead to sql injection. The...

CVE-2026-8785 projectworlds hospital-management-system-in-php GET Parameter update_info.php getAllPatientDetail sql injection

A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by this vulnerability is the function getAllPatientDetail of the file updateinfo.php of the component GET Parameter Handler. Executing a manipulation of the argument appointmentno can lead to sql injection. The...

CVE-2023-27652

An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges cause a denial of service via the updateinfo field of the default.xml file...

Novel-Plus Cross-Site Scripting Vulnerability

Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. A cross-site scripting vulnerability exists in Novel-Plus 4.2.0 and earlier versions, which stems from the parameter nickName in the file /user/updateUserInfo that causes cross-site scripting...

CVE-2023-27651

An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges via the updateinfo field of the default.xml file...

Ego Studio SuperClean 安全漏洞

Ego Studio SuperClean is a versatile, powerful phone cleaner and reliable optimizer for Android from Ego Studio, Inc. A security vulnerability exists in Ego Studio SuperClean version 1.1.9 and 1.1.5 that originates from a vulnerability that allows an attacker to gain privileges via the updateinfo...

PT-2023-21285

Name of the Vulnerable Software and Affected Versions Ego Studio SuperClean versions 1.1.5 through 1.1.9 Description An issue in Ego Studio SuperClean allows an attacker to gain privileges via the update info field of the default .xml file. Recommendations For versions 1.1.5 through 1.1.9, consid...

Oracle: Security Advisory (ELSA-2015-2152)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...