CVE-2024-4921

A vulnerability classified as critical has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is an unknown function of the file /employeegatepass/classes/Users.php?f=ssave. The manipulation of the argument img leads to unrestricted upload. It is possible to...

CVE-2024-4921

CVE-2024-4921 affects the SourceCodester Employee and Visitor Gate Pass Logging System 1.0. The vulnerability is in an unknown function of the file /employee_gatepass/classes/Users.php?f=ssave, where manipulation of the img parameter enables unrestricted upload. This can be exploited remotely, an...

Employee and Visitor Gate Pass Logging System Code Issue Vulnerability

Employee and Visitor Gate Pass Logging System is an employee and visitor pass logging system developed by Carlo Montero. A code issue exists in Employee and Visitor Gate Pass Logging System version 1.0 where an incorrect manipulation of the parameter img results in an unrestricted upload...

CVE-2024-34226

SQL injection vulnerability in /php-sqlite-vms/?page=managevisitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to execute arbitrary SQL commands via the id parameters...

CVE-2024-34226

SQL injection vulnerability in /php-sqlite-vms/?page=managevisitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to execute arbitrary SQL commands via the id parameters...

Visitor Management System 安全漏洞

Visitor Management System is a visitor management system. A security vulnerability exists in SourceCodester Visitor Management System version 1.0, which originates from a SQL injection vulnerability that allows an attacker to execute arbitrary SQL commands via the id parameter...

CVE-2024-34226

SQL injection vulnerability in /php-sqlite-vms/?page=managevisitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to execute arbitrary SQL commands via the id parameters...

CVE-2024-34226

SQL injection vulnerability in /php-sqlite-vms/?page=managevisitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to execute arbitrary SQL commands via the id parameters...

PT-2024-25756 · Sourcecodester · Sourcecodester Stock Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Visitor Management System version 1.0 Description: The issue allows attackers to execute arbitrary SQL commands, potentially leading to data exfiltration. This can be exploited remotely via the id parameter in the...

CVE-2024-31937

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Visitor Analytics TWIPLA Visitor Analytics IO allows Stored XSS.This issue affects TWIPLA Visitor Analytics IO: from n/a through 1.2.0...

CVE-2024-31937

CVE-2024-31937 affects the TWIPLA (Visitor Analytics IO) WordPress plugin. The connected Wordfence entry documents a Stored Cross-Site Scripting vulnerability in TWIPLA, described as Improper Neutralization of Input During Web Page Generation. Affected version range is from unspecified inception ...

CVE-2024-31937 WordPress TWIPLA (Visitor Analytics IO) plugin <= 1.2.0 - Cross-Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Visitor Analytics TWIPLA Visitor Analytics IO allows Stored XSS.This issue affects TWIPLA Visitor Analytics IO: from n/a through 1.2.0...

PT-2024-24301 · Twipla · Twipla

Name of the Vulnerable Software and Affected Versions: TWIPLA Visitor Analytics IO versions 1.2.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...

WordPress TWIPLA (Visitor Analytics IO) plugin <= 1.2.0 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin TWIPLA Visitor Analytics IO versions = 1.2.0...

CVE-2024-3542

A vulnerability classified as problematic was found in Campcodes Church Management System 1.0. This vulnerability affects unknown code of the file /admin/addvisitor.php. The manipulation of the argument mobile leads to cross site scripting. The attack can be initiated remotely. The exploit has be...

Church Management System 跨站脚本漏洞

Church Management System is a church management system. A cross-site scripting vulnerability exists in version 1.0 of the Church Management System, which stems from a cross-site scripting vulnerability in the mobile parameter of the /admin/addvisitor.php file...

WordPress TWIPLA (Visitor Analytics IO) Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)

Software TWIPLA Visitor Analytics IO Type Plugin Vulnerable versions = 1.2.0 Fixed in 1.3.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31937 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 35e7ceea8aa3 Credits Dhabaleshwar Das Required...

PT-2024-40688 · Unknown · Javaparser

Name of the Vulnerable Software and Affected Versions: JavaParser affected versions not specified Description: The issue is related to a security exception in the JavaParser library. A crash occurs due to a security exception, with the crash state involving the TreeVisitorValidator.accept and...

PT-2024-40676 · Unknown · Javaparser

Name of the Vulnerable Software and Affected Versions: JavaParser affected versions not specified Description: A security exception occurs due to an issue in the TreeVisitorValidator.accept and FieldAccessExpr.getMetaModel functions. Recommendations: At the moment, there is no information about a...

CVE-2024-24867

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Osamaesh WP Visitor Statistics Real Time Traffic.This issue affects WP Visitor Statistics Real Time Traffic: from n/a through 6.9.4...