EUVD-2022-52634

Malicious code in bioql PyPI...

CVE-2025-55194

Part-DB is an open source inventory management system for electronic components. Prior to version 1.17.3, any authenticated user can upload a profile picture with a misleading file extension e.g., .jpg.txt, resulting in a persistent 500 Internal Server Error when attempting to view or edit that...

PHPGurukul Vehicle Parking Management System 安全漏洞

PHPGurukul Vehicle Parking Management System is an open source parking management system by PHPGurukul. A security vulnerability exists in PHPGurukul Vehicle Parking Management System v1.13, which originates from a stored cross-site scripting vulnerability in the /users/profile.php file...

CVE-2022-42034

Wedding Planner v1.0 is vulnerable to arbitrary code execution via usersprofile.php...

Wedding Planner 代码问题漏洞

Wedding Planner is a wedding planner program by pushpam abhishek. Designed to provide users with an easy way to plan their wedding through a web application while using real data. A code issue vulnerability exists in Wedding Planner v1.0 that stems from easy execution of arbitrary code via...

CVE-2022-30822

In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "usersprofile.php" file...

CVE-2022-30822

In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "usersprofile.php" file...

CVE-2021-30167: Insufficiently Protected Credentials

The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices...

PG All Share Video SQL Injection Vulnerability

PG All Share Video is a set of video sharing website scripts. A SQL injection vulnerability exists in PG All Share Video version 1.0. A remote attacker can exploit this vulnerability by sending PATHINFO to search/tag, friends/index, or users/profile to inject SQL commands...

CVE-2017-15969

PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...

CVE-2017-15969

PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...

Sql injection

PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...

PT-2017-14323

Name of the Vulnerable Software and Affected Versions PG All Share Video version 1.0 Description The issue allows SQL Injection via the PATH INFO to various endpoints, including "search/tag", "friends/index", "users/profile", or "video catalog/category". Recommendations For PG All Share Video...

CVE-2017-15969: Improper Neutralization of Special Elements used in an SQL Command

PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...

PT-2017-18926

Name of the Vulnerable Software and Affected Versions BigTree CMS versions prior to 4.2.19 Description The issue is related to CSRF, allowing modification of user information, removal of packages, ignoring versions, and setting FTP directories. Specifically, it affects the...

CVE-2017-9444: Cross-Site Request Forgery (CSRF)

BigTree CMS through 4.2.18 has CSRF related to the core\admin\modules\users\profile\update.php script modify user information, the index.php/admin/developer/packages/delete/ URI remove packages, the index.php/admin/developer/upgrade/ignore/?versions= URI, and the...