CVE-2023-5695 CodeAstro Internet Banking System pages_reset_pwd.php cross site scripting

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file pagesresetpwd.php. The manipulation of the argument email with the input testing%40example.com'%26%25alert9860 leads to...

CVE-2023-5694 CodeAstro Internet Banking System pages_system_settings.php cross site scripting

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been classified as problematic. Affected is an unknown function of the file pagessystemsettings.php. The manipulation of the argument sysname with the input alert991 leads to cross site scripting. It is possible to launch...

CVE-2023-5694

The CVE-2023-5694 entry affects CodeAstro Internet Banking System 1.0. Affected is an unknown function in pages_system_settings.php where manipulating the sys_name parameter (example input containing script tags) results in cross-site scripting. Exploitation is possible remotely, and an exploit h...

CVE-2023-5694 CodeAstro Internet Banking System pages_system_settings.php cross site scripting

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been classified as problematic. Affected is an unknown function of the file pagessystemsettings.php. The manipulation of the argument sysname with the input alert991 leads to cross site scripting. It is possible to launch...

CVE-2023-5693

Summary: CVE-2023-5693 concerns CodeAstro Internet Banking System 1.0, where the parameter email in the file pages_reset_pwd.php enables SQL injection. The issue is remotely exploitable and, per sources, the exploit has been disclosed publicly. Affected software: CodeAstro Internet Banking System...

CVE-2023-5684

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231012. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /importexport.php. The manipulation leads to os command injection. The attack can be launched remotely. The...

CVE-2023-5684

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231012. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /importexport.php. The manipulation leads to os command injection. The attack can be launched remotely. The...

Command injection

A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20231012. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /importexport.php. The manipulation leads to os command injection. The attack can be launched...

CVE-2023-5684 Byzoro Smart S85F Management Platform importexport.php os command injection

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231012. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /importexport.php. The manipulation leads to os command injection. The attack can be launched remotely. The...

CVE-2023-5684

CVE-2023-5684 affects Byzoro Smart S85F Management Platform (and related Beijing Baichuo variant) up to version 20231012. Affects an unknown functionality in /importexport.php, where manipulation leads to OS command injection. Impact is execution of commands with remote access; exploitation is po...

CVE-2023-5683

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231010 and classified as critical. This issue affects some unknown processing of the file /sysmanage/importconf.php. The manipulation of the argument btnfilerenew leads to os command injection. The attack may be initiated...

Command injection

A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20231010 and classified as critical. This issue affects some unknown processing of the file /sysmanage/importconf.php. The manipulation of the argument btnfilerenew leads to os command injection. The attack may be...

CVE-2023-5683 Byzoro Smart S85F Management Platform importconf.php os command injection

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231010 and classified as critical. This issue affects some unknown processing of the file /sysmanage/importconf.php. The manipulation of the argument btnfilerenew leads to os command injection. The attack may be initiated...

CVE-2023-5682

A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/training/record/delete.php. The manipulation of the argument RECORDID leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2023-5681

A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/listaddrfwresourceip.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

Sql injection

A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/training/record/delete.php. The manipulation of the argument RECORDID leads to sql injection. The exploit has been disclosed to the public and may be used...

Sql injection

A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/listaddrfwresourceip.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2023-5682 Tongda OA delete.php sql injection

A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/training/record/delete.php. The manipulation of the argument RECORDID leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2023-5681

CVE-2023-5681 affects Netentsec NS-ASG Application Security Gateway 6.3. The vulnerability targets an unknown portion of /admin/list_addr_fwresource_ip.php and enables SQL injection. Exploitation can be performed remotely, and the vulnerability entry notes that the exploit has been disclosed publ...

CVE-2023-5681 Netentsec NS-ASG Application Security Gateway list_addr_fwresource_ip.php sql injection

A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/listaddrfwresourceip.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...