Archive
20 August 2024
Vulnerabilities first published on this day (UTC), newest first.
147 results · Feed
-
Low 3.5
itsourcecode Laravel Property Management System Notes Page create cross site scripting
A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/notes/create of the component Notes Page. The manipulation of …
-
Medium 6.3
itsourcecode Laravel Property Management System DocumentsController.php UpdateDocumentsRequest unrestricted upload
A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been classified as critical. Affected is the function UpdateDocumentsRequest of the file DocumentsController.php. The manipulation leads to unrestricted upload. It is pos…
-
Medium 6.3
itsourcecode Laravel Property Management System PropertiesController.php upload unrestricted upload
A vulnerability was found in itsourcecode Laravel Property Management System 1.0 and classified as critical. This issue affects the function upload of the file PropertiesController.php. The manipulation of the argument file leads to unrestricted upload. The a…
-
Low 3.5
SourceCodester Leads Manager Tool update-leads.php cross site scripting
A vulnerability has been found in SourceCodester Leads Manager Tool 1.0 and classified as problematic. This vulnerability affects unknown code of the file update-leads.php. The manipulation of the argument phone_number leads to cross site scripting. The attac…
-
Medium 6.3
itsourcecode Project Expense Monitoring System printtransfer.php sql injection
A vulnerability classified as critical was found in itsourcecode Project Expense Monitoring System 1.0. This vulnerability affects unknown code of the file printtransfer.php. The manipulation of the argument transfer_id leads to sql injection. The attack can …
-
High 7.5
Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in information …
-
Critical 9.8
Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in code executi…
-
High 7.6CVE-2024-35540 Public exploit
A stored cross-site scripting (XSS) vulnerability in Typecho v1.3.0 allows attackers to execute arbitrary web scripts o…
-
Medium 5.4
Friendica 2024.03 is vulnerable to Cross Site Scripting (XSS) in settings/profile via the homepage, xmpp, and matrix pa…
-
High 8.8
An issue was discovered in Italtel Embrace 1.6.4. The web application inserts the access token of an authenticated user…
-
Critical 9.8
An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday …
-
Medium 5.7
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_log.php?c…
-
High 8.8
A Cross-Site Request Forgery (CSRF) in the component delete_product.php of Warehouse Inventory System v2.0 allows attac…
-
High 8.8
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password paramet…
-
High 8.8
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.p…
-
Critical 9.8
Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id paramete…
-
Critical 9.8
An arbitrary file upload vulnerability in ERP commit 44bd04 allows attackers to execute arbitrary code via uploading a …
-
Critical 9.8
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter…
-
High 8.6
Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id paramete…
-
High 8.8
A Cross-Site Request Forgery (CSRF) in the component admin_modify_room.php of Hotel Management System commit 91caab8 al…
-
High 8.0
A Cross-Site Request Forgery (CSRF) in the component edit_product.php of Warehouse Inventory System v2.0 allows attacke…
-
Critical 9.8
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter…
-
Critical 9.8
An issue in the login component (process_login.php) of Hotel Management System commit 79d688 allows attackers to authen…
-
High 8.8
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.p…
-
High 8.8
A Cross-Site Request Forgery (CSRF) in the component delete_user.php of Warehouse Inventory System v2.0 allows attacker…
-
High 8.8
Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number…
-
High 8.8
A Cross-Site Request Forgery (CSRF) in the component add_product.php of Warehouse Inventory System v2.0 allows attacker…
-
Critical 9.8
ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/c…
-
High 8.8
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_config.ph…
-
High 8.8
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/submit_page.php.
-
High 7.1
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.ph…
-
Medium 5.7
A Cross-Site Request Forgery (CSRF) in the component edit_group.php of Warehouse Inventory System v2.0 allows attackers…
-
Critical 9.8
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter…
-
High 7.1
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/edit_page.php?l…
-
Critical 9.8
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at…
-
High 8.8
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.ph…
-
High 8.8
A Cross-Site Request Forgery (CSRF) in the component delete_media.php of Warehouse Inventory System v2.0 allows attacke…
-
Critical 9.8
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter…
-
High 7.5
Keyfactor AWS Orchestrator through 2.0 allows Information Disclosure.
-
High 8.8
A Cross-Site Request Forgery (CSRF) in the component categorie.php of Warehouse Inventory System v2.0 allows attackers …