Skip to content
OpenAdvisories

Archive

30 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /30 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 4.7
    CVE-2023-7181

    Muyun DedeBIZ Add Attachment unrestricted upload

    A vulnerability was found in Muyun DedeBIZ up to 6.2.12 and classified as critical. Affected by this issue is some unknown functionality of the component Add Attachment Handler. The manipulation leads to unrestricted upload. The attack may be launched remotel…

    Muyun DedeBIZ
  • Medium 5.5
    CVE-2023-7180

    Tongda OA 2017 delete.php sql injection

    A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/project/proj/delete.php. The manipulation of the argument PROJ_ID_STR leads to sql injection…

    Tongda OA 2017
  • Medium 4.7
    CVE-2023-7179

    Campcodes Online College Library System HTTP POST Request category_row.php sql injection

    A vulnerability, which was classified as critical, was found in Campcodes Online College Library System 1.0. Affected is an unknown function of the file /admin/category_row.php of the component HTTP POST Request Handler. The manipulation of the argument id le…

    Campcodes Online College Library System
  • Medium 4.7
    CVE-2023-7178

    Campcodes Online College Library System HTTP POST Request book_row.php sql injection

    A vulnerability, which was classified as critical, has been found in Campcodes Online College Library System 1.0. This issue affects some unknown processing of the file /admin/book_row.php of the component HTTP POST Request Handler. The manipulation of the ar…

    Campcodes Online College Library System
  • Medium 4.7
    CVE-2023-7177

    Campcodes Online College Library System HTTP POST Request book_add.php sql injection

    A vulnerability classified as critical was found in Campcodes Online College Library System 1.0. This vulnerability affects unknown code of the file /admin/book_add.php of the component HTTP POST Request Handler. The manipulation of the argument category lead…

    Campcodes Online College Library System
  • Medium 4.7
    CVE-2023-7176

    Campcodes Online College Library System HTTP POST Request return_add.php sql injection

    A vulnerability classified as critical has been found in Campcodes Online College Library System 1.0. This affects an unknown part of the file /admin/return_add.php of the component HTTP POST Request Handler. The manipulation of the argument student leads to …

    Campcodes Online College Library System
  • Medium 4.7
    CVE-2023-7175

    Campcodes Online College Library System HTTP POST Request borrow_add.php sql injection

    A vulnerability was found in Campcodes Online College Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/borrow_add.php of the component HTTP POST Request Handler. The manipulation of the…

    Campcodes Online College Library System
  • Medium 4.3
    CVE-2023-7173 Public exploit

    PHPGurukul Hospital Management System registration.php cross site scripting

    A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file registration.php. The manipulation of the argument First Name leads to cross site scripting. It is possible …

    PHPGurukul Hospital Management System
  • Medium 4.3
    CVE-2018-25096

    MdAlAmin-aol Own Health Record logout.php cross-site request forgery

    A vulnerability was found in MdAlAmin-aol Own Health Record 0.1-alpha/0.2-alpha/0.3-alpha/0.3.1-alpha. It has been rated as problematic. This issue affects some unknown processing of the file includes/logout.php. The manipulation leads to cross-site request f…

    MdAlAmin-aol Own Health Record
  • Medium 5.4
    CVE-2023-50550

    Layui cross-site scripting (XSS) vulnerability

    layui up to v2.74 was discovered to contain a cross-site scripting (XSS) vulnerability via the data-content parameter.

    layui npm
  • Medium 5.4
    CVE-2023-52265

    IDURAR (aka idurar-erp-crm) through 2.0.1 allows stored XSS via a PATCH request with a crafted JSON email template in t…