3944 matches found
CVE-2022-30413
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=deleteapplication...
CVE-2022-30403
Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/?p=products&c=...
CVE-2022-30373
Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargotypes/managecargotype.php?id=...
Strapi 跨站脚本漏洞
Strapi is an open source content management system CMS. Strapi suffers from a cross-site scripting vulnerability that stems from insufficient filtering of user-supplied data in the file upload function, which can be exploited by remote attackers to inject and execute arbitrary HTML and script cod...
Pharmacy Sales And Inventory System SQL注入漏洞
Pharmacy Sales And Inventory System is a pharmacy sales and inventory system by Carlo Montero Individual Developer. Pharmacy Sales And Inventory System v1.0 contains a security vulnerability that can be exploited by an attacker to conduct an SQL injection attack via...
Simple Social Networking Site SQL注入漏洞
Simple Social Networking Site is a social networking site. Simple Social Networking Site has a security vulnerability that can be exploited by attackers to conduct SQL injection attacks via /sns/admin/members/viewmember.php?id=...
CVE-2022-30002
Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editNominee.php?nomineeid=...
CVE-2022-30000
Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editPayment.php?reciptno=...
CVE-2022-29739
Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=user/manageuser&id=...
CVE-2022-29999
Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editClient.php?clientid=...
CVE-2022-29982
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance/manageservice.php?id=...
InHand Networks InRouter Series 安全漏洞
InHand Networks InRouter Series is a series of routers from InHand Networks, U.S.A. An elevation of privilege vulnerability exists in the InHand Networks InRouter302 V3.5.4 release, which could be exploited by an attacker to cause an increase in privileges via a specially crafted HTTP request...
Simple Client Management System SQL注入漏洞
Simple Client Management System is a simple client management system from Carlo Montero's personal developer. version 1.0 of Simple Client Management System is vulnerable to SQL injection, which originates from a vulnerability in /cms/classes/Master. php?f=deleteclient in the post request id...
CVE-2021-43081
The CVE-2021-43081 entry corresponds to an XSS vulnerability (CWE-79) in Fortinet FortiOS and FortiProxy where an unauthenticated attacker can inject crafted input through the web filter override form and trigger cross-site scripting via HTTP GET requests. Affected products and versions include F...
Employee Daily Task Management System 跨站脚本漏洞
Employee Daily Task Management System is a web-based application that provides an online platform for company employees to manage their daily tasks. Employee Daily Task Management System version 1.0 contains a cross-site scripting vulnerability that could be exploited by remote attackers to injec...
Exploit for Code Injection in Mybb
CVE-2022-24734 PoC An RCE can be obtained on MyBB's Admin CP...
CVE-2022-28557
There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 USAC15V1.0BRV15.03.05.20multiTDE01.bin device web, which can also cooperate with CVE-2021-44971 to cause unconditional arbitrary command execution...
CVE-2022-28557
Affected product : Tenda AC15 (US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin) web interface. Vulnerability : command injection at the /goform/setsambacfg interface. Root cause / nature : vulnerability enables unconditional arbitrary command execution and can cooperate with CVE-2021-44971 to achieve ...
F5 BIG-IP 跨站脚本漏洞
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A cross-site scripting vulnerability exists in the F5 BIG-IP TMUI, which can be exploited by attackers to execute JavaScript ...