KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Wykorzystanie luki w SourceCodester Class and Exam Timetabling System umożliwia atak XSS.
Wykryto podatność XSS w Online Job Portal, umożliwiającą zdalne ataki.
A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. Impacted is the function Util::search of the file classes/util.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The project was…
A security flaw has been discovered in Zen Cart up to 2.2.2. Affected by this issue is some unknown functionality of the file admin/modules.php of the component Module Configuration. The manipulation of the argument configuration results in sql injection. The attack may be launched remotely. The…
Wstrzyknięcie SQL w osCommerce umożliwia zdalne ataki na konfigurację szablonów e-mail.
Wstrzyknięcie SQL w AMTT Hotel Broadband OS umożliwia zdalne wykonanie ataku.
Luka w Eleveo Call Recording Software umożliwia zdalne wykonanie ataku XSS.
Wstrzyknięcie skryptów w Eleveo Quality Management umożliwia atak XSS zdalnie.
Wstrzyknięcie skryptu w Webkul Bagisto umożliwia atak XSS zdalnie.
Wykryto podatność w AstrBot, która umożliwia zdalne wykonanie ataku XSS.
Wstrzyknięcie skryptów w vnote umożliwia atak zdalny przez XSS.
A flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::join of the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class.php of the component dmCodeEditor. Executing a manipulation can lead to path traversal. The attack can be launched remotely.…
A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected by this issue is the function htmlspecialchars_decode of the file App/Feelcrm/Common/Model/CrmDefineFormModel.class.php of the component Create Customer Endpoint. Performing a manipulation of the argument customer_form[remark]…
Błąd w FUXA pozwala na utrzymanie uprawnień po usunięciu roli, co prowadzi do niezgodności w kontroli dostępu.
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/add_drug.php of the component Drug Creation. Such manipulation of the argument txtname/cmdtype/txtusage/txtsideeffect/cmdcontraindication leads to sql…
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the function mysqli_real_escape_string of the file /Admin/add_symptom.php of the component Symptom Creation. Performing a manipulation of the argument txtname results in sql injection. It…
A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/edit_class.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed…
Apache YuniKorn 1.9.0 and earlier does not implement label and user annotation checks for workload UPDATE action bypassing all checks. Workloads in YuniKorn are defined as the following Kubernetes objects: "deployments", "replicasets", "statefulsets", "daemonsets", "jobs", "cronjobs". The CREATE…
A vulnerability was found in ashymuzuro Full-Ecommece-Website and Muzuro Ecommerce System up to 1.1.0. This affects an unknown part of the file /admin/index.php?add_product of the component Add Product Page. The manipulation results in unrestricted upload. The attack may be performed from remote.…
Wstrzyknięcie kodu w Jij-MCP-Server umożliwia zdalne wykonanie nieautoryzowanego kodu.
A security vulnerability has been detected in yangshare warehouseManager 仓库管理系统 1.1.0. This affects the function addCustomer of the file CustomerManageHandler.java. Such manipulation of the argument Name leads to cross site scripting. The attack can be executed remotely. The exploit has been…
Wstrzyknięcie kodu w shanyu SyCms umożliwia zdalne wykonanie nieautoryzowanych działań.
A security vulnerability has been detected in postmanlabs httpbin up to 0.6.1. This affects an unknown function of the file httpbin-master/httpbin/core.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.…
Nieograniczony upload plików w Iqbolshoh php-business-website umożliwia zdalne ataki.
A vulnerability has been found in DouPHP up to 1.8 Release 20251022. This impacts an unknown function of the file upload/include/file.class.php. The manipulation of the argument File leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to the…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Wykorzystanie luki w SourceCodester Class and Exam Timetabling System umożliwia atak XSS. | Wykorzystanie luki w SourceCodester Class and Exam Timetabling System umożliwia atak XSS. |
Do wiadomości | 2,0 | 0,35 % | ||
| Wykryto podatność XSS w Online Job Portal, umożliwiającą zdalne ataki. | Wykryto podatność XSS w Online Job Portal, umożliwiającą zdalne ataki. |
Do wiadomości | 2,0 | 0,35 % | ||
| A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. | A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. Impacted is the function Util::search of the file classes/util.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The project was… |
Do wiadomości | 2,0 | 0,33 % | ||
| A security flaw has been discovered in Zen Cart up to 2.2.2. | A security flaw has been discovered in Zen Cart up to 2.2.2. Affected by this issue is some unknown functionality of the file admin/modules.php of the component Module Configuration. The manipulation of the argument configuration results in sql injection. The attack may be launched remotely. The… |
Do wiadomości | 2,0 | 0,33 % | ||
| Wstrzyknięcie SQL w osCommerce umożliwia zdalne ataki na konfigurację szablonów e-mail. | Wstrzyknięcie SQL w osCommerce umożliwia zdalne ataki na konfigurację szablonów e-mail. |
Do wiadomości | 2,0 | 0,33 % | ||
| Wstrzyknięcie SQL w AMTT Hotel Broadband OS umożliwia zdalne wykonanie ataku. | Wstrzyknięcie SQL w AMTT Hotel Broadband OS umożliwia zdalne wykonanie ataku. |
Do wiadomości | 2,0 | 0,33 % | ||
| Luka w Eleveo Call Recording Software umożliwia zdalne wykonanie ataku XSS. | Luka w Eleveo Call Recording Software umożliwia zdalne wykonanie ataku XSS. |
Do wiadomości | 2,0 | 0,33 % | ||
| Wstrzyknięcie skryptów w Eleveo Quality Management umożliwia atak XSS zdalnie. | Wstrzyknięcie skryptów w Eleveo Quality Management umożliwia atak XSS zdalnie. |
Do wiadomości | 2,0 | 0,33 % | ||
| Wstrzyknięcie skryptu w Webkul Bagisto umożliwia atak XSS zdalnie. | Wstrzyknięcie skryptu w Webkul Bagisto umożliwia atak XSS zdalnie. |
Do wiadomości | 2,0 | 0,33 % | ||
| Wykryto podatność w AstrBot, która umożliwia zdalne wykonanie ataku XSS. | Wykryto podatność w AstrBot, która umożliwia zdalne wykonanie ataku XSS. |
Do wiadomości | 2,0 | 0,33 % | ||
| Wstrzyknięcie skryptów w vnote umożliwia atak zdalny przez XSS. | Wstrzyknięcie skryptów w vnote umożliwia atak zdalny przez XSS. |
Do wiadomości | 2,0 | 0,33 % | ||
| A flaw has been found in diem-project diem up to 5.1.3. | A flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::join of the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class.php of the component dmCodeEditor. Executing a manipulation can lead to path traversal. The attack can be launched remotely.… |
Do wiadomości | 2,0 | 0,33 % | ||
| A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. | A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected by this issue is the function htmlspecialchars_decode of the file App/Feelcrm/Common/Model/CrmDefineFormModel.class.php of the component Create Customer Endpoint. Performing a manipulation of the argument customer_form[remark]… |
Do wiadomości | 2,0 | 0,33 % | ||
| Błąd w FUXA pozwala na utrzymanie uprawnień po usunięciu roli, co prowadzi do niezgodności w kontroli dostępu. | Błąd w FUXA pozwala na utrzymanie uprawnień po usunięciu roli, co prowadzi do niezgodności w kontroli dostępu. |
Do wiadomości | 2,0 | 0,32 % | ||
| A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. | A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/add_drug.php of the component Drug Creation. Such manipulation of the argument txtname/cmdtype/txtusage/txtsideeffect/cmdcontraindication leads to sql… |
Do wiadomości | 2,0 | 0,32 % | ||
| A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. | A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the function mysqli_real_escape_string of the file /Admin/add_symptom.php of the component Symptom Creation. Performing a manipulation of the argument txtname results in sql injection. It… |
Do wiadomości | 2,0 | 0,32 % | ||
| A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. | A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/edit_class.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed… |
Do wiadomości | 2,0 | 0,32 % | ||
| Apache YuniKorn 1.9.0 and earlier does not implement label and user annotation checks for workload UPDATE action bypassing all checks. | Apache YuniKorn 1.9.0 and earlier does not implement label and user annotation checks for workload UPDATE action bypassing all checks. Workloads in YuniKorn are defined as the following Kubernetes objects: "deployments", "replicasets", "statefulsets", "daemonsets", "jobs", "cronjobs". The CREATE… |
Do wiadomości | 2,0 | 0,31 % | ||
| A vulnerability was found in ashymuzuro Full-Ecommece-Website and Muzuro Ecommerce System up to 1.1.0. | A vulnerability was found in ashymuzuro Full-Ecommece-Website and Muzuro Ecommerce System up to 1.1.0. This affects an unknown part of the file /admin/index.php?add_product of the component Add Product Page. The manipulation results in unrestricted upload. The attack may be performed from remote.… |
Do wiadomości | 2,0 | 0,31 % | ||
| Wstrzyknięcie kodu w Jij-MCP-Server umożliwia zdalne wykonanie nieautoryzowanego kodu. | Wstrzyknięcie kodu w Jij-MCP-Server umożliwia zdalne wykonanie nieautoryzowanego kodu. |
Do wiadomości | 2,0 | 0,3 % | ||
| A security vulnerability has been detected in yangshare warehouseManager 仓库管理系统 1.1.0. | A security vulnerability has been detected in yangshare warehouseManager 仓库管理系统 1.1.0. This affects the function addCustomer of the file CustomerManageHandler.java. Such manipulation of the argument Name leads to cross site scripting. The attack can be executed remotely. The exploit has been… |
Do wiadomości | 2,0 | 0,29 % | ||
| Wstrzyknięcie kodu w shanyu SyCms umożliwia zdalne wykonanie nieautoryzowanych działań. | Wstrzyknięcie kodu w shanyu SyCms umożliwia zdalne wykonanie nieautoryzowanych działań. |
Do wiadomości | 2,0 | 0,28 % | ||
| A security vulnerability has been detected in postmanlabs httpbin up to 0.6.1. | A security vulnerability has been detected in postmanlabs httpbin up to 0.6.1. This affects an unknown function of the file httpbin-master/httpbin/core.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.… |
Do wiadomości | 2,0 | 0,28 % | ||
| Nieograniczony upload plików w Iqbolshoh php-business-website umożliwia zdalne ataki. | Nieograniczony upload plików w Iqbolshoh php-business-website umożliwia zdalne ataki. |
Do wiadomości | 2,0 | 0,28 % | ||
| A vulnerability has been found in DouPHP up to 1.8 Release 20251022. | A vulnerability has been found in DouPHP up to 1.8 Release 20251022. This impacts an unknown function of the file upload/include/file.class.php. The manipulation of the argument File leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to the… |
Do wiadomości | 2,0 | 0,28 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.