13483 matches found
Stored XSS vulnerability in pipeline-aggregator-view
pipeline-aggregator-view 1.13 and earlier does not escape a variable representing the current view's URL in inline JavaScript. This results in a stored cross-site scripting XSS vulnerability exploitable by authenticated attackers with Overall/Read permission. pipeline-aggregator-view 1.14 obtains...
SourceCodester Monitoring of Students Cyber Accounts System 跨站脚本漏洞
Monitoring of Students Cyber Accounts System is a Monitoring of Students Cyber Accounts System by Chris Jim Egot Individual Developer. A cross-site scripting vulnerability exists in SourceCodester Monitoring of Students Cyber Accounts System version 1.0, which stems from an issue with the file...
CVE-2023-1481: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in SourceCodester Monitoring of Students Cyber Accounts System 1.0. Affected by this issue is some unknown functionality of the file modules/balance/index.php?view=balancelist of the component POST Parameter Handler. The...
SourceCodester Automatic Question Paper Generator System SQL注入漏洞
Automatic Question Paper Generator System is an automatic question paper generator system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Automatic Question Paper Generator System version 1.0, which originates from a SQL injection vulnerability found in...
SourceCodester Medicine Tracker System SQL注入漏洞
Medicine Tracker System is a medicine tracker system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Medicine Tracker System version 1.0, which stems from a SQL injection vulnerability found in the parameter id in medicines/viewdetails.php...
PT-2023-16985 · Sourcecodester · Sourcecodester Automatic Question Paper Generator System
Name of the Vulnerable Software and Affected Versions: SourceCodester Automatic Question Paper Generator System version 1.0 Description: A critical issue has been found in the GET Parameter Handler component of the file admin/courses/view course.php. The manipulation of the id argument leads to s...
PT-2023-17004 · Sourcecodester · Sourcecodester Student Study Center Desk Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Student Study Center Desk Management System version 1.0 Description: A critical issue affects the function view student of the file "admin/?page=students/view student". The manipulation of the argument id with a specific input...
Student Study Center Desk Management System SQL注入漏洞
Student Study Center Desk Management System is a student study center desk management system. A SQL injection vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which originates from a security issue in the function viewstudent in...
Atlassian Jira 8.6.0 < 8.8.1 Xss In Xml Export View
According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 7.13.16, 8.0.0 prior to 8.5.5 or 8.6.0 prior to 8.8.1. It is, therefore, affected by a vulnerability which permits remote attackers to inject arbitrary HTML or JavaScript via ...
Atlassian Jira 8.0.0 < 8.5.5 Xss In Xml Export View
According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 7.13.16, 8.0.0 prior to 8.5.5 or 8.6.0 prior to 8.8.1. It is, therefore, affected by a vulnerability which permits remote attackers to inject arbitrary HTML or JavaScript via ...
Debian DSA-5372-1 : rails - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5372 advisory. Multiple vulnerabilities were discovered in rails, the Ruby based server-side MVC web application framework, which could result in XSS, data disclosure and open...
CVE-2023-0349
The Akuvox E11 libvoice library provides unauthenticated access to the camera capture for image and video. This could allow an attacker to view and record image and video from the camera...
CVE-2023-0349 CVE-2023-0349
The Akuvox E11 libvoice library provides unauthenticated access to the camera capture for image and video. This could allow an attacker to view and record image and video from the camera...
CVE-2022-2258: Undefined Security Weakness
In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permissions to view these items...
The vulnerability of the Power Monitoring Expert software allows a intruder to view and modify the equipment settings.
The vulnerability of the Power Monitoring Exper software-related software is related to insufficient verification of input data. Exploiting this vulnerability allows a remote attacker to view and modify the settings of the equipment...
Cross-site Scripting (XSS)
vega is vulnerable to Cross-site Scripting XSS attacks. The library does not properly enforce types for its arguments in the lassoAppend function, which allows an attacker to specify any object with a push function. The push function then can be set to any function that has the access to event.vi...
CVE-2023-27210
Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/vieworder.php...
PT-2023-16864 · Sourcecodester · Sourcecodester Sales Tracker Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Sales Tracker Management System version 1.0 Description: A critical issue has been found in the SourceCodester Sales Tracker Management System, affecting some unknown functionality of the file admin/clients/view client.php. The...
Online Pizza Ordering System SQL注入漏洞
Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, an individual developer. A security vulnerability exists in Online Pizza Ordering System version 1.0, which is caused by a SQL injection vulnerability via the id parameter in /admin/vieworder.php...