Archive
19 March 2023
Vulnerabilities first published on this day (UTC), newest first.
5 results · Clear filters · Feed
-
Medium 6.3
RockOA acloudCosAction.php.SQL runAction unrestricted upload
A vulnerability, which was classified as critical, was found in RockOA 2.3.2. This affects the function runAction of the file acloudCosAction.php.SQL. The manipulation of the argument fileid leads to unrestricted upload. It is possible to initiate the attack …
-
Medium 6.3
code-projects Simple Art Gallery adminHome.php sql injection
A vulnerability classified as critical was found in code-projects Simple Art Gallery 1.0. Affected by this vulnerability is an unknown functionality of the file adminHome.php. The manipulation of the argument reach_city leads to sql injection. The attack can …
-
Medium 6.3CVE-2023-1498 Public exploit
code-projects Responsive Hotel Site Newsletter Log messages.php sql injection
A vulnerability classified as critical has been found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file messages.php of the component Newsletter Log Handler. The manipulation of the argument title leads to sql injection. …
-
Medium 6.3
SourceCodester Simple and Nice Shopping Cart Script uploaderm.php unrestricted upload
A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. It has been rated as critical. This issue affects some unknown processing of the file uploaderm.php. The manipulation of the argument submit leads to unrestricted upload. Th…
-
Medium 6.5CVE-2023-1496 Scanner template
Cross-site Scripting (XSS) - Reflected in imgproxy/imgproxy
Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0.