Web-Based Student Clearance System SQL注入漏洞

Web-Based Student Clearance System is a web-based student clearance system from the personal developer Ndueso Okorie.A SQL injection vulnerability exists in Web-Based Student Clearance System, which stems from the lack of validation of external input SQL statements in the parameter txtusername in...

Simple Cold Storage Management System SQL注入漏洞

Simple Cold Storage Management System is a cold storage management system. Simple Cold Storage Management System /csms/admin/storages/managestorage.php?id= is vulnerable to SQL injection. A remote attacker can use this vulnerability to submit a special SQL request to manipulate the database, whic...

MediaWiki 跨站脚本漏洞

MediaWiki is a free and free-to-use web-based wiki engine from the U.S. Wikimedia MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. MediaWiki has a cross-site scripting vulnerability that can be exploited by attackers to inject...

Canon Medical Vitrea View 跨站脚本漏洞

Canon Medical Vitrea View is a DICOM network-enabled enterprise viewing solution from Canon, Japan. A cross-site scripting vulnerability exists in Canon Medical Vitrea View, which is used to visually display DICOM and multimedia images. An attacker could use this vulnerability to execute arbitrar...

ETAP Lighting International ETAP Safety Manager 跨站脚本漏洞

ETAP Safety Manager is a management system where users observe, configure and maintain emergency lighting. Etaplighting Etap Safety Manager version 1.0.0.32 is vulnerable to a cross-site scripting vulnerability that stems from action parameters not being properly cleared before being returned to...

UBUNTU-CVE-2022-3057

Inappropriate implementation in iframe Sandbox in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

Wedding Planner SQL注入漏洞

Wedding Planner is a wedding planner project by pushpam abhishek. Designed to provide users with an easy way to plan their wedding through a web application while using real data. Wedding Planner v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of externally...

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a content management solution from Adobe that can be used to build websites, mobile applications and forms. The solution supports mobile content management, marketing and sales campaign management, and multi-site management, etc. A cross-site scripting vulnerabilit...

Banking System SQL注入漏洞

Online Banking System is a simple banking system project. It is used to manage bank customer accounts and process basic customer transactions.Online Banking System SQL injection vulnerability, which stems from a SQL injection issue in the custid parameter in the /net-banking/editcustomeraction.ph...

CVE-2022-40087

Simple College Website v1.0 was discovered to contain an arbitrary file write vulnerability via the function fileputcontents. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

Pydio 跨站脚本漏洞

Pydio AjaXplorer is a web-based remote file manager from Pydio. The manager supports uploading and downloading files, online file editing, image previewing, and more. A security vulnerability exists in Pydio version 4.2.3, which can be exploited by an attacker to cause a cross-site scripting...

CVE-2022-40027

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component newTask.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the shortName parameter...

Exploit for Cross-site Scripting in Creativeitem Academy_Learning_Management_System

CVE-2022-38553 CROSS SITE SCRIPTING XSS ON "ACADEMY LEARNING...

CVE-2022-38576

Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /interview/delete.php?action=deletecand&id=...

JEESNS 跨站脚本漏洞

Fuzhou Lingxi Network Technology JEESNS is a social management system based on JAVA enterprise-level platform developed by China's Fuzhou Lingxi Network Technology Company. Relying on enterprise-level JAVA efficiency, security, stability and other advantages , to create a domestic JAVA version of...

CVE-2022-29649

Qsmart Next v4.1.2 was discovered to contain a cross-site scripting XSS vulnerability...

dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion.

.NET Core and Visual Studio Denial of Service Vulnerability...

CVE-2022-38595

Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edituser.php...

UBUNTU-CVE-2022-31187

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Affected versions were found to not properly neutralize HTML tags in the global search context. Users...

vlearning.afu.ac.ae Cross Site Scripting vulnerability OBB-2916876

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...