Cisco Integrated Management Controller Web-Based Management Interface Command Injection (cisco-sa-cimc-cmd-inj-bLuPcb)

According to its self-reported version, the Cisco Integrated Management Controller Web-Based Management Interface is affected by a command injection vulnerability. Due to insufficient user input validation, an authenticated, remote attacker with Administrator-level privileges could perform comman...

CVE-2024-20258: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gateway could allow an unauthenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due to insufficient...

CVE-2024-20369: URL Redirection to Untrusted Site

A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator NSO could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of a parameter in an HTTP request. An...

CVE-2024-20257: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface.r This vulnerability is due to insufficient validation of user input. An attacker...

PT-2024-33328

Name of the Vulnerable Software and Affected Versions Campcodes Complete Web-Based School Management System version 1.0 Description A critical issue has been found in the system, affecting the file /view/show student2.php. The manipulation of the grade argument leads to SQL injection. The attack...

PT-2024-4570

Name of the Vulnerable Software and Affected Versions: Cisco Crosswork Network Services Orchestrator NSO affected versions not specified Description: The issue is related to improper input validation of a parameter in an HTTP request in the web-based management interface. This could allow an...

PT-2024-33331

Name of the Vulnerable Software and Affected Versions Campcodes Complete Web-Based School Management System version 1.0 Description A critical issue has been found in the system, affecting an unknown functionality of the file /view/student exam mark insert form1.php. The manipulation of the grade...

Campcodes Complete Web-Based School Management System SQL注入漏洞

Campcodes Complete Web-Based School Management System is a web-based school management system from Campcodes, Inc. A SQL injection vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which originates from a SQL injection vulnerability in the grade...

CVE-2024-4908: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/studentattendancehistory1.php. The manipulation of the argument index leads to sql injection. The attack may be initiated...

CVE-2024-4907: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /view/showstudent2.php. The manipulation of the argument grade leads to sql injection. The attack can be initiated remotely...

CVE-2024-4906: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/showstudent1.php. The manipulation of the argument grade leads to sql injection. It is possible to initiate the attack remotely...

CVE-2024-20256: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Web Appliance could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due to insufficient...

CVE-2024-4910: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/studentexammarkinsertform1.php. The manipulation of the argument grade leads to sql injection. The...

CVE-2024-4909: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /view/studentduepayment.php. The manipulation of the argument dueyear leads to sql injection. It is possible to launch the attack...

PT-2024-33329

Name of the Vulnerable Software and Affected Versions Campcodes Complete Web-Based School Management System version 1.0 Description A critical issue affects the processing of the file /view/student attendance history1.php, where the manipulation of the index argument leads to SQL injection. The...

PT-2024-33330

Name of the Vulnerable Software and Affected Versions Campcodes Complete Web-Based School Management System version 1.0 Description A critical issue has been found in the system, affecting an unknown function of the file /view/student due payment.php. The manipulation of the due year argument lea...

NetIQ iManager 路径遍历漏洞

NetIQ iManager is an advanced web-based management console from NetIQ UK. Customized secure access to network management utilities and content can be provided from any location in the world. A security vulnerability exists in NetIQ iManager version 3.2.6.0200, which stems from the presence of pat...

Campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System that stems from an SQL injection vulnerability in the dueyear parameter of...

CVE-2024-4911: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/studentexammarkupdateform.php. The manipulation of the argument exam leads to sql injection. The attack may...

CVE-2024-28134

An unauthenticated remote attacker can extract a session token with a MitM attack and gain web-based management access with the privileges of the currently logged in user due to cleartext transmission of sensitive information. No additional user interaction is required. The access is limited as...