1994 matches found
PHPGurukul Online Book Store SQL注入漏洞
Online BookStore is an online bookstore program. There is a sql injection vulnerability in Online Book Store v1.0. The vulnerability is caused by the id parameter in detail.php not filtering special characters, and an attacker can execute arbitrary SQL statements through this vulnerability...
CVE-2021-20407
IBM Security Verify Information Queue 1.0.6 and 1.0.7 discloses sensitive information in source code that could be used in further attacks against the system. IBM X-Force ID: 196185...
CVE-2021-3294
CASAP Automated Enrollment System 1.0 is affected by cross-site scripting XSS in users.php. An attacker can steal a cookie to perform user redirection to a malicious website...
PT-2021-19985
Name of the Vulnerable Software and Affected Versions CASAP Automated Enrollment System version 1.0 Description The issue is related to cross-site scripting XSS in the users.php file. An attacker can exploit this to steal a cookie, which can then be used to redirect a user to a malicious website...
Sourcecodester Alumni Management System SQL Injection Vulnerability
Sourcecodester Alumni Management System is a Php, Mysql based alumni management system from Sourcecodester, Inc. in the United States. Sourcecodester Alumni Management System version 1.0 suffers from a SQL injection vulnerability, SQL injection was originally discovered by Ankita Pal in October...
Egavilan Media Expense Management System Cross-Site Scripting Vulnerability
Egavilan Media Expense Management System is a Php-based management system for logging overhead from Egavilan Media, USA. A cross-site scripting vulnerability exists in the EGavilan Media Expense Management System version 1.0, which can be exploited to permanently store malicious JavaScript code i...
CVE-2020-35463
Version 1.0.0 of the Instana Dynamic APM Docker image contains a blank password for the root user. Systems deployed using affected versions of the Instana Dynamic APM container may allow a remote attacker to achieve root access with a blank password...
SourceCodester Online Bus Booking System SQL Injection Vulnerability
SourceCodester Online Bus Booking System is an online bus booking system by an individual developer. The system helps bus companies manage the booking and ticketing process. A SQL injection vulnerability exists in Online Bus Booking System Project Using PHP/MySQL version 1.0, which can be exploit...
CVE-2020-29287
An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be exploited via the id parameter in viewcar.php or the carid parameter in booking.php...
Diveshlunker Bloodx SQL注入漏洞
Diveshlunker Bloodx is a Php-based website builder for blood bank management by the individual developer Diveshlunker. BloodX version 1.0 suffers from a SQL injection vulnerability that can be exploited by attackers to bypass authentication...
NetArt News Lister 跨站脚本漏洞
News Lister is a free php script for adding a news section to an existing website or creating a simple news site or personal blog. A stored cross-site scripting vulnerability exists in News Lister 1.0.0. An attacker can exploit the vulnerability to insert code into news headlines...
Frenchbread Private-ip Code Issue Vulnerability
Frenchbread Private-ip is a Js codebase for checking if an Ip is private by Frenchbread individual developers. A security vulnerability exists in the Frenchbread Private-ip package prior to v1.0.5 that stems from insufficient regular expressions to adequately filter the reserved IP range, resulti...
Code Execution Vulnerability in Win8 URL Navigation Source 1.0
Win8 website navigation whole site using html5+css+jquery layout, static version of a single page. Win8 URL navigation source code 1.0 code execution vulnerability, an attacker can use the vulnerability to obtain control of the server...
SourceCodester Water Billing System SQL Injection Vulnerability
SourceCodester Water Billing System is a water billing system from SourceCodester USA. A SQL injection vulnerability exists in SourceCodester Water Billing System version 1.0, which stems from a failure of the program to properly validate user input, and allows an attacker to perform SQL injectio...
PT-2020-15593 · Sourcecodester · Sourcecodester Tailor Management
Name of the Vulnerable Software and Affected Versions: SourceCodester Tailor Management System version 1.0 Description: A Reflected Cross-Site Scripting XSS issue in the index.php login-portal webpage allows remote attackers to harvest keys pressed by an unauthenticated victim who clicks on a...
Static HTTP Server Buffer Overflow Vulnerability
Static HTTP Server is a static HTTP server. A buffer overflow vulnerability exists in Static HTTP Server version 1.0. The vulnerability stems from a network system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write...
Unspecified vulnerability in Qpid C++
Qpid C++ is a message-oriented middleware message broker program written in C++ by the Apache Software Foundation. A security vulnerability exists in Qpid C++ version 1.0. An attacker could exploit this vulnerability to cause the program to crash...
WordPress avenirsoft-directdownload plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. avenirsoft-directdownload is a download button plugin used in it. A cross-site request forgery vulnerability exists in version 1.0 of...
S-CMS School Building System v1.0 SQL Injection Vulnerability in Background aj*** U_*** Parameter
S-CMS is a content management system CMS based on PHP and MySQL. S-CMS School Building System v1.0 has a SQL injection vulnerability in the background aj U parameter, which can be exploited by attackers to obtain sensitive information from the database...