Archive
29 January 2023
Vulnerabilities first published on this day (UTC), newest first.
7 results · Clear filters · Feed
-
Medium 6.3
SourceCodester Online Tours & Travels Management System payment_operation.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. This affects an unknown part of the file user\operations\payment_operation.php. The manipulation of the argument booking_id leads to s…
-
Medium 5.3
Unchecked Error Condition in froxlor/froxlor
Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10.
-
Medium 6.2
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froxlor/froxlor
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froxlor/froxlor prior to 2.0.10.
-
Medium 5.5
Business Logic Errors in froxlor/froxlor
Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10.
-
Medium 5.4
Weak Password Requirements in froxlor/froxlor
Weak Password Requirements in GitHub repository froxlor/froxlor prior to 2.0.10.
-
Medium 5.4
NOSH 4a5cfdb allows stored XSS via the create user page. For example, a first name (of a physician, assistant, or billi…
-
Medium 5.3
WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be ab…