PT-2024-17835 · Unknown · 1000 Projects Daily College Class Work Report Book

Name of the Vulnerable Software and Affected Versions: 1000 Projects Daily College Class Work Report Book version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /login.php. The manipulation of the user argument leads to SQL injection. It is possible to...

CodeAstro House Rental Management System 注入漏洞

CodeAstro House Rental Management System is a house rental management system from CodeAstro. An injection vulnerability exists in CodeAstro House Rental Management System version 1.0, which stems from an incorrect manipulation of the parameter u/p that can lead to SQL injection...

CVE-2024-55492

Winmail Server 4.4 is vulnerable to fuser=%22%3E%3Csvg%20onload Cross Site Scripting XSS...

CVE-2024-10793

The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the userid parameter in all versions up to, and including, 5.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...

CVE-2024-8757 Boost Your Blog's Engagement with WP Post Author <= 3.8.1 - Authenticated (Administrator+) SQL Injection

The WP Post Author – Boost Your Blogs Engagement with Author Box, Social Links, Co-Authors, Guest Authors, Post Rating System, and Custom User Registration Form Builder plugin for WordPress is vulnerable to time-based SQL Injection via the linkeduserid parameter in all versions up to, and...

PT-2024-39844 · Unknown · Code-Projects Blood Bank System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank System version 1.0 Description: A critical issue was found in the code-projects Blood Bank System, affecting an unknown function of the file register.php. The manipulation of the user argument leads to SQL injection. ...

code-projects Blood Bank System SQL注入漏洞

Code-Projects Blood Bank System is a Code-Projects open source blood bank management system. A SQL injection vulnerability exists in code-projects Blood Bank System version 1.0, which stems from an SQL injection issue in the user parameter of the register.php page...

CVE-2024-44837

A cross-site scripting XSS vulnerability in the component \bean\Manager.java of Drug v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user parameter...

CVE-2024-44837

A cross-site scripting XSS vulnerability in the component \bean\Manager.java of Drug v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user parameter...

CVE-2024-44837

A cross-site scripting XSS vulnerability in the component \bean\Manager.java of Drug v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user parameter...

PT-2024-31272

Name of the Vulnerable Software and Affected Versions Drug version 1.0 Description A cross-site scripting XSS vulnerability in the component Manager.java of Drug allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user parameter. This issue can be...

CVE-2024-44837

The CVE-2024-44837 issue affects Drug v1.0, specifically the component \bean\Manager.java, where a crafted payload injected into the user parameter enables cross-site scripting (XSS) and execution of arbitrary web scripts/HTML. The vulnerability is described with a CVSS v3.1 base score of 5.4 (Me...

CVE-2024-44837

A cross-site scripting XSS vulnerability in the component \bean\Manager.java of Drug v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user parameter...

CVE-2024-44837: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the component \bean\Manager.java of Drug v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user parameter...

CVE-2024-44808

An issue in Vypor Attack API System v.1.0 allows a remote attacker to execute arbitrary code via the user GET parameter...

CVE-2024-44808

A critical security vulnerability exists in Vypor Attack API System v.1.0 (also referred to as API-ATTACK-SYSTEM ). The flaw allows a remote attacker to achieve arbitrary code execution by exploiting improper input validation of the user GET parameter . This vulnerability has a CVSS 3.1 base scor...

API-ATTACK-SYSTEM 安全漏洞

API-ATTACK-SYSTEM is an attack tool from the individual developers at Vypor. A security vulnerability exists in API-ATTACK-SYSTEM version v.1.0, which originated from a vulnerability that allows remote attackers to execute arbitrary code via the user GET parameter...

CVE-2024-44808: Improper Input Validation

An issue in Vypor Attack API System v.1.0 allows a remote attacker to execute arbitrary code via the user GET parameter...

CVE-2024-43700

xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability. When a user of the affected product is tricked to process a specially crafted file, arbitrary code may be executed on the user's environment...

PT-2024-38858 · Unknown · Blood Bank System

Name of the Vulnerable Software and Affected Versions: Blood Bank System version 1.0 Description: A critical vulnerability was found in the Blood Bank System. The issue affects an unknown function of the file /login.php of the component Login Page. The manipulation of the user argument leads to S...