1994 matches found
AC Repair and Services System Cross-Site Scripting Vulnerability
AC Repair and Services System is an air conditioning repair and services system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in AC Repair and Services System version 1.0, which stems from a cross-site scripting XSS vulnerability in the parameters...
PT-2023-31521 · Sourcecodester · Simple Membership System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Membership System version 1.0 Description: A critical issue was found in the Simple Membership System, affecting an unknown functionality of the file club validator.php. The manipulation of the club argument leads to SQL...
Food Ordering website SQL Injection Vulnerability
Food Ordering website is a food ordering website. A SQL injection vulnerability exists in Food Ordering Website version 1.0, which stems from some unknown processing in categoryfood.php that causes sql injection via the parameter id...
WordPress plugin Lock User Account Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
Cleaning Business Software Security Vulnerability
Cleaning Business Software is an open source cleaning business software by PHPJabbers. PHPJabbers Cleaning Business Software version 1.0 has a security vulnerability , the vulnerability stems from the user password is not encrypted , an attacker can access all user accounts...
Take-Note App Cross-Site Request Forgery Vulnerability
Take-Note App is a note-taking application by the individual developer Remy Andrade. A cross-site request forgery vulnerability exists in Take-Note App version 1.0. An attacker can exploit this vulnerability to perform cross-site request forgery attacks...
PT-2023-30899 · Sourcecodester · Sourcecodester Contact Manager App
Name of the Vulnerable Software and Affected Versions: SourceCodester Contact Manager App version 1.0 Description: A problem was found in the SourceCodester Contact Manager App. It affects some unknown functionality of the file update.php. The issue leads to cross-site request forgery. The attack...
Inventory Management System Cross-Site Scripting Vulnerability
Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in SourceCodester Free and Open Source Inventory Management System v1.0, which stems from the presence of multiple cross-site scripting XSS vulnerabilities that could...
MOXA MXsecurity SQL Injection Vulnerability
MOXA MXsecurity is a management platform from China-based MOXA. It provides centralized visibility and security management to easily monitor and identify network threats and prevent security misconfigurations to create a robust threat defense. A security vulnerability exists in MXsecurity v1.0.1...
CVE-2023-39708
A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add New parameter under the New Buy section...
Inventory Management System 跨站脚本漏洞
Inventory Management System is an inventory management system from the individual developers of stemword. A security vulnerability exists in Free and Open Source Inventory Management System v1.0 that could allow an attacker to execute arbitrary web script or HTML by injecting a crafted payload in...
Inventory Management System SQL注入漏洞
Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Free and Open Source Inventory Management System version 1.0, which stems from an incorrect manipulation of the columns0data parameter that can lead to sql...
Hospital Management System SQL注入漏洞
Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. An SQL injection vulnerability exists in Free Hospital Management System for Small Practices version 1.0, which stems from the paramet...
PT-2023-4540 · Sourcecodester · Sourcecodester Free Hospital Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Free Hospital Management System for Small Practices version 1.0 Description: A critical issue has been identified, affecting the /patient/appointment.php file. The sheduledate argument is vulnerable to SQL injection, allowing...
Card Holder Management System 安全漏洞
Card Holder Management System is a cardholder management system from the individual developer Arvin Arandilla. A security vulnerability exists in Card Holder Management System version 1.0, which stems from the component Minus Value Handler that can lead to improper input validation...
CVE-2023-31939
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the costomerid parameter at customeredit.php...
eVotingSystem-PHP SQL Injection Vulnerability
eVotingSystem-PHP is a PHP-based e-voting system by Mohammad Ajazuddin Individual Developer. A security vulnerability exists in eVotingSystem-PHP version v.1.0 that originates from obtaining sensitive information and executing arbitrary code via user input fields...
EasyAdmin8 Code Issues Vulnerabilities
EasyAdmin8 is a server administration suite for Blumlaut Individual Developers. A security vulnerability exists in EasyAdmin8 version v.1.0, which stems from the upload type method allowing the upload of arbitrary file types...