Skip to content
OpenAdvisories

Archive

23 July 2023

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Medium 6.3

    phpscriptpoint BloodBank POST Parameter search sql injection

    A vulnerability classified as critical has been found in phpscriptpoint BloodBank 1.1. Affected is an unknown function of the file /search of the component POST Parameter Handler. The manipulation of the argument country/city/blood_group_id leads to sql injec…

  • Medium 4.7
    CVE-2023-3852 EPSS 25%

    OpenRapid RapidCMS upload.php unrestricted upload

    A vulnerability was found in OpenRapid RapidCMS up to 1.3.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/upload.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiat…

  • Medium 6.3

    SourceCodester Lost and Found Information System HTTP POST Request sql injection

    A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=delete_category of the component HTTP POST Request …

  • Medium 4.3

    NxFilter user.jsp cross-site request forgery

    A vulnerability has been found in NxFilter 4.3.2.5 and classified as problematic. This vulnerability affects unknown code of the file user.jsp. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The identifier of this …

  • Medium 4.1

    DedeBIZ sys_sql_query.php sql injection

    A vulnerability, which was classified as problematic, has been found in DedeBIZ 6.2.10. Affected by this issue is some unknown functionality of the file /admin/sys_sql_query.php. The manipulation of the argument sqlquery leads to sql injection. The attack may…

  • Medium 5.5

    A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kern…