Skip to content
OpenAdvisories

Archive

29 January 2023

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Medium 6.3

    SourceCodester Online Tours & Travels Management System payment_operation.php sql injection

    A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. This affects an unknown part of the file user\operations\payment_operation.php. The manipulation of the argument booking_id leads to s…

  • Medium 5.3

    Unchecked Error Condition in froxlor/froxlor

    Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10.

  • Medium 6.2

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froxlor/froxlor

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froxlor/froxlor prior to 2.0.10.

  • Medium 5.5

    Business Logic Errors in froxlor/froxlor

    Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10.

  • Medium 5.4

    Weak Password Requirements in froxlor/froxlor

    Weak Password Requirements in GitHub repository froxlor/froxlor prior to 2.0.10.

  • Medium 5.4

    NOSH 4a5cfdb allows stored XSS via the create user page. For example, a first name (of a physician, assistant, or billi…

  • Medium 5.3

    WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be ab…