CVE-2023-5582 ZZZCMS Personal Profile Page cross site scripting

A vulnerability, which was classified as problematic, has been found in ZZZCMS 2.2.0. This issue affects some unknown processing of the component Personal Profile Page. The manipulation leads to basic cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to th...

Cross site scripting

A vulnerability classified as problematic was found in SourceCodester Medicine Tracker System 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

CVE-2023-5581 SourceCodester Medicine Tracker System index.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Medicine Tracker System 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

CVE-2023-5581 SourceCodester Medicine Tracker System index.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Medicine Tracker System 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

CVE-2023-5580

A vulnerability classified as critical has been found in SourceCodester Library System 1.0. This affects an unknown part of the file index.php. The manipulation of the argument category leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2023-5579

A vulnerability was found in yhz66 Sandbox 6.1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /im/user/ of the component User Data Handler. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may...

Sql injection

A vulnerability classified as critical has been found in SourceCodester Library System 1.0. This affects an unknown part of the file index.php. The manipulation of the argument category leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

Design/Logic Flaw

A vulnerability was found in yhz66 Sandbox 6.1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /im/user/ of the component User Data Handler. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may...

CVE-2023-5580

The CVE-2023-5580 entry corresponds to a SQL injection vulnerability in SourceCodester Library System 1.0, specifically affecting the index.php file via manipulating the category argument. The root cause is improper input handling leading to SQL injection that can be triggered remotely. Documente...

CVE-2023-5580 SourceCodester Library System index.php sql injection

A vulnerability classified as critical has been found in SourceCodester Library System 1.0. This affects an unknown part of the file index.php. The manipulation of the argument category leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2023-5579

CVE-2023-5579 affects yhz66 Sandbox 6.1.0, specifically the User Data Handler component (file path /im/user/). The vulnerability arises from manipulation of an unknown functionality in that area, leading to information disclosure. The exploit has been publicly disclosed. Connected sources indicat...

CVE-2023-5579 yhz66 Sandbox User Data information disclosure

A vulnerability was found in yhz66 Sandbox 6.1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /im/user/ of the component User Data Handler. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may...

CVE-2023-5579 yhz66 Sandbox User Data information disclosure

A vulnerability was found in yhz66 Sandbox 6.1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /im/user/ of the component User Data Handler. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may...

CVE-2023-5578

A vulnerability was found in Portábilis i-Educar up to 2.7.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file \intranet\agendaimprimir.php of the component HTTP GET Request Handler. The manipulation of the argument codagenda with the inp...

CVE-2023-5578 Portábilis i-Educar HTTP GET Request agenda_imprimir.php cross site scripting

A vulnerability was found in Portábilis i-Educar up to 2.7.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file \intranet\agendaimprimir.php of the component HTTP GET Request Handler. The manipulation of the argument codagenda with the inp...

CVE-2023-5578

CVE-2023-5578 affects Portábilis i-Educar up to 2.7.5. The vulnerability is a cross-site scripting flaw in the HTTP GET Request Handler, specifically in the file intranet\agenda_imprimir.php, where the cod_agenda parameter can be injected with a payload like );'> . Remote exploitation is possi...

CVE-2023-5497

A vulnerability classified as critical has been found in Tongda OA 2017 11.10. Affected is an unknown function of the file general/hr/salary/welfaremanage/delete.php. The manipulation of the argument WELFAREID leads to sql injection. It is possible to launch the attack remotely. The exploit has...

Sql injection

A vulnerability classified as critical has been found in Tongda OA 2017 11.10. Affected is an unknown function of the file general/hr/salary/welfaremanage/delete.php. The manipulation of the argument WELFAREID leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2023-5497

CVE-2023-5497 affects Tongda OA 2017 (version 11.10). The vulnerability is an SQL injection in the file general/hr/salary/welfare_manage/delete.php, triggered by manipulating the WELFARE_ID parameter. Impact is remote exploitation, with public disclosure of the exploit. The available connected do...

CVE-2023-5497 Tongda OA 2017 delete.php sql injection

A vulnerability classified as critical has been found in Tongda OA 2017 11.10. Affected is an unknown function of the file general/hr/salary/welfaremanage/delete.php. The manipulation of the argument WELFAREID leads to sql injection. It is possible to launch the attack remotely. The exploit has...