363 matches found
CVE-2024-31673
Kliqqi-CMS 2.0.2 is vulnerable to SQL Injection in loaddata.php via the userid parameter...
PT-2024-26384
Name of the Vulnerable Software and Affected Versions Campcodes Online Event Management System version 1.0 Description A critical issue has been discovered, affecting the /api/process.php file. The manipulation of the userId argument leads to sql injection, allowing remote attacks. The issue has...
Netentsec NS-ASG Application Security Gateway Security Vulnerability
Netentsec NS-ASG Application Security Gateway is an application security gateway from China Netentsec. A security vulnerability exists in Netentsec NS-ASG Application Security Gateway version 6.3, which originates from the parameter UserId in the file /vpnweb/resetpwd/resetpwd.php, which can lead...
CVE-2023-46980
An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the userID parameter...
CVE-2023-46980
An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the userID parameter...
CVE-2023-43270
dst-admin v1.5.0 was discovered to contain a remote command execution RCE vulnerability via the userId parameter at /home/playerOperate...
CVE-2023-43270
dst-admin v1.5.0 was discovered to contain a remote command execution RCE vulnerability via the userId parameter at /home/playerOperate...
CVE-2023-43270
dst-admin v1.5.0 was discovered to contain a remote command execution RCE vulnerability via the userId parameter at /home/playerOperate...
dst-admin Code Injection Vulnerability
dst-admin is a web program written in Java by qinming99, an individual developer. A security vulnerability exists in dst-admin v1.5.0, which is caused by a Remote Command Execution RCE vulnerability in the parameter userId of the component /home/playerOperate...
CVE-2023-43270
CVE-2023-43270 concerns the web app dst-admin v1.5.0, where a Remote Command Execution (RCE) flaw is triggered by the userId parameter at the /home/playerOperate endpoint. The vulnerability is described across multiple sources as an RCE in dst-admin v1.5.0 with a CVSSv3.1 base score of 9.8 (CRITI...
PT-2023-28753 · Dst-Admin · Dst-Admin
Name of the Vulnerable Software and Affected Versions: dst-admin version 1.5.0 Description: The issue is related to a remote command execution RCE vulnerability. It can be exploited via the userId parameter at the "/home/playerOperate" API endpoint. Recommendations: For dst-admin version 1.5.0, a...
CVE-2023-40945
Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php...
CVE-2023-40945
Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php...
CVE-2023-36100
An issue was discovered in IceCMS version 2.0.1, allows attackers to escalate privileges and gain sensitive information via UserID parameter in api/User/ChangeUser...
CVE-2023-36100
An issue was discovered in IceCMS version 2.0.1, allows attackers to escalate privileges and gain sensitive information via UserID parameter in api/User/ChangeUser...
CVE-2023-36100
An issue was discovered in IceCMS version 2.0.1, allows attackers to escalate privileges and gain sensitive information via UserID parameter in api/User/ChangeUser...
CVE-2023-36100
CVE-2023-36100 affects IceCMS 2.0.1. The issue is a privilege escalation and information disclosure via the UserID parameter in the endpoint api/User/ChangeUser. Root cause details are not fully disclosed in the provided documents, but multiple sources confirm the vulnerability in this specific v...
IceCMS Security Vulnerability
IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation of NgShow individual developers. A security vulnerability exists in IceCMS version 2.0.1 that allows an attacker to elevate privileges and obtain sensitive information via the UserID parameter in...