CVE-2024-44683

Seacms v13 is vulnerable to Cross Site Scripting XSS via admin-video.php...

OpenRapid RapidCMS SQL注入漏洞

OpenRapid RapidCMS is an OpenRapid open source CMS system that is fast and easy to use. A SQL injection vulnerability exists in OpenRapid RapidCMS version 1.3.1 and earlier versions, which originates from a SQL injection vulnerability in the username parameter of the /resource/runlogon.php file...

CVE-2024-43936

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPDeveloper EmbedPress allows Stored XSS.This issue affects EmbedPress: from n/a through 4.0.8...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version v12.9, which stems from vulnerability to cross-site scripting attacks that allow an...

dingfanzu SQL注入漏洞

dingfanzu is a php-based food ordering website developed by gk2007 individual developer. A SQL injection vulnerability exists in dingfanzu, which is caused by a SQL injection vulnerability in the username parameter of the /ajax/checkin.php file...

Exploit for CVE-2024-41312

CVE-2024-41312. InstantCMS - Stored Cross Site Scripting XSS...

Kashipara Music Management System 安全漏洞

Kashipara Music Management System is a music management system from Kashipara. A cross-site request forgery vulnerability exists in Kashipara Music Management System v1.0, which originates from /music/ajax.php?action=deletegenre does not adequately verify that the request comes from a trusted use...

PT-2024-30165 · Unknown · Kashipara Music Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Music Management System version 1.0 Description: A Cross-Site Request Forgery CSRF issue was found in the system via the "/music/ajax.php?action=delete playlist" page. This allows for unauthorized actions to be performed...

CVE-2024-42764

Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery CSRF via /deleteTicket.php...

CVE-2023-49198 Apache SeaTunnel Web: Arbitrary file read vulnerability

Mysql security vulnerability in Apache SeaTunnel. Attackers can read files on the MySQL server by modifying the information in the MySQL URL allowLoadLocalInfile=true&allowUrlInLocalInfile=true&allowLoadLocalInfileInPath=/&maxAllowedPacket=655360 This issue affects Apache SeaTunnel: 1.0.0. Users...

CVE-2024-42782

A SQL injection vulnerability in "/music/ajax.php?action=findmusic" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "search" parameter...

JetBrains TeamCity Cross-Site Scripting Vulnerability (CNVD-2025-16715)

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A cross-site scripting vulnerability exists in...

Dassault Systèmes 3DEXPERIENCE 安全漏洞

Dassault Systèmes 3DEXPERIENCE is a business and innovation platform from Dassault Systèmes France. A security vulnerability exists in Dassault Systèmes 3DEXPERIENCE versions R2022x through 3DEXPERIENCE R2024x, which stems from susceptibility to a reflective cross-site scripting attack that could...

TOTOLINK EX1200L 安全漏洞

The TOTOLINK EX1200L is a wireless repeater from China's Gion Electronics TOTOLINK. The TOTOLINK EX1200L suffers from a buffer overflow vulnerability that stems from the parameter IpAddress in the file /www/cgi-bin/cstecgi.cgi that causes a stack-based buffer overflow. An attacker can exploit thi...

Scada-LTS 跨站脚本漏洞

Scada-LTS is an open source, web-based, multi-platform solution from Scada-LTS Open Source. A cross-site scripting vulnerability exists in Scada-LTS version 2.7.8, which stems from unknown functionality in the file /Scada-LTS/app.shtm/alarms/Scada that results in cross-site scripting...

PT-2024-9653 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.21 and earlier Description: The issue is related to a DOM-based Cross-Site Scripting XSS vulnerability. This vulnerability could be exploited by an attacker to execute arbitrary code in the context of the...

CVE-2024-7754

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ajax/checkmedicinename.php. The manipulation of the argument username leads to sql injection. The attack may be initiated...

PT-2024-38537 · Cayin Technology · Cayin Technology Cms

Name of the Vulnerable Software and Affected Versions: CAYIN Technology CMS affected versions not specified Description: The issue concerns the specific CGI of the CAYIN Technology CMS, which fails to properly validate user input. This allows a remote attacker with administrator privileges to...

Adobe Commerce 跨站请求伪造漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A cross-site request forgery vulnerability exists in Adobe Commerce. The vulnerability stems from the web application not adequately verifying that a...

SAP Commerce 跨站脚本漏洞

SAP Commerce is a set of cloud-based e-commerce platforms from Germany's SAP. It supports sales management, marketing management, order management, and operations management. A cross-site scripting vulnerability exists in SAP Commerce Backoffice that stems from insufficient coding of...