Simple Chat System SQL注入漏洞

Simple Chat System is a simple chat system by nurhodelta17 individual developer. A SQL injection vulnerability exists in Simple Chat System version 1.0, which stems from an incorrect manipulation of the parameter convoid that can lead to sql injection...

PT-2023-22564 · Sourcecodester · Sourcecodester Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lost and Found Information System version 1.0 Description: A vulnerability was found in the Manage User Page component, specifically affecting the "admin/?page=user/manage user" endpoint. The issue arises from the manipulation ...

Local Services Search Engine Management System 跨站脚本漏洞

Local Services Search Engine Management System is a local services search engine management system. A cross-site scripting vulnerability exists in Local Services Search Engine Management System version 1.0, which stems from an incorrect manipulation of the parameter areaa that can lead to...

Students Online Internship Timesheet System 跨站脚本漏洞

Students Online Internship Timesheet System is an online internship timesheet system for students by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in Students Online Internship Timesheet System version 1.0, which stems from an incorrect manipulation of the...

PT-2023-24344 · Unknown · Sourcecodester Faculty Evaluation System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Faculty Evaluation System version 1.0 Description: The issue allows for arbitrary code execution via the "/eval/ajax.php?action=save user" API endpoint. This could potentially lead to unauthorized access and control of the...

PT-2023-23448 · Sourcecodester · Sourcecodester Employee/Visitor Gate Pass Logging System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee and Visitor Gate Pass Logging System version 1.0 Description: The issue is related to SQL Injection via the /employee gatepass/classes/Login.php endpoint. This allows for potential exploitation. Recommendations: For...

MOXA MXsecurity 信任管理问题漏洞

MOXA MXsecurity is a management platform from China-based MOXA. It provides centralized visibility and security management to easily monitor and identify network threats and prevent security misconfigurations to create a robust threat defense. A security vulnerability exists in MOXA MXsecurity...

PT-2023-22504 · Unknown · Sourcecodester Student Study Center Desk Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Student Study Center Desk Management System version 1.0 Description: The issue is related to a SQL Injection vulnerability. It affects the adminreportsindex.php endpoint, specifically the date from parameter. Recommendations: F...

CVE-2023-2776

A vulnerability was found in code-projects Simple Photo Gallery 1.0. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-229282 is the identifier assigned to this vulnerability...

Sucms 跨站脚本漏洞

Sucms is a completely open source and free PHP+MYSQL system by China Su Editor Subianji team. A cross-site scripting vulnerability exists in Sucms version 1.0, which stems from cross-site scripting due to incorrect manipulation of the parameter intro...

Stored XSS vulnerability in loadcomplete

loadcomplete 1.0 and earlier does not escape the LoadComplete test name in its test result page. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. As of publication of this advisory, there is no fix. Learn why we announce this...

Faculty Evaluation System SQL注入漏洞

Faculty Evaluation System is a faculty evaluation system by the individual developer Carlo Montero. A security vulnerability exists in version v1.0 of the Sourcecodester Faculty Evaluation System, which originates in /eval/admin/managesubject.php?id=Existence of SQL injection...

Personnel Property Equipment System SQL注入漏洞

Personnel Property Equipment System is a personnel property equipment management system by Jon Remus Sevellejo Personal Developer. A SQL injection vulnerability exists in Personnel Property Equipment System version 1.0, which stems from an incorrect manipulation of the clientid parameter that can...

Billing Management System SQL注入漏洞

Billing Management System is a simple web application for managing customer billing for electricity supplier companies. A SQL injection vulnerability exists in Billing Management System v1.0, which stems from a lack of validation of externally entered SQL statements in the parameter id of...

SourceCodester ICT Laboratory Management System 跨站脚本漏洞

ICT Laboratory Management System is an ICT Laboratory Management System by kevind individual developers. A cross-site scripting vulnerability exists in SourceCodester ICT Laboratory Management System version 1.0, which stems from a problem in the file views/roominfo.php in the component GET...

PT-2023-20867 · Unknown · Sourcecodester Online Exam System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam System version 1.0 Description: A critical issue has been found in the SourceCodester Online Exam System, affecting the POST Parameter Handler component in the /kelas/data file. The manipulation of the columns1data...

PT-2023-20853 · Unknown · Sourcecodester Online Exam System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam System version 1.0 Description: A critical issue was found in the SourceCodester Online Exam System, affecting some unknown functionality of the file /mahasiswa/data of the component POST Parameter Handler. The...

PT-2023-20839 · Unknown · Sourcecodester Billing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Billing Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Billing Management System. This issue affects the file editproduct.php of the component GET Parameter Handler. The...

Covid-19 Contact Tracing System SQL注入漏洞

Covid-19 Contact Tracing System is a new Crown Pneumonia Contact Tracing System by Carlo Montero Individual Developer. A SQL injection vulnerability exists in Covid-19 Contact Tracing System version 1.0, which stems from an incorrect manipulation of the parameter id resulting in sql injection...

PT-2023-20768 · Sourcecodester · Sourcecodester Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lost and Found Information System version 1.0 Description: A vulnerability has been found in the system, classified as problematic, affecting an unknown functionality of the file admin/. The manipulation of the page argument...