Canteen Management System 1.0 is vulnerable to SQL Injection via /php_action/getOrderReport.php.Read More ...
Continue Reading
February 17, 2023
The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in blog search. A remote attacker can trick the victim to follow a specially crafted link and exe ...
Continue Reading
February 17, 2023
The vulnerability was found Moodle which exists due to insufficient limitations on the "start page" preference. A remote attacker can set that preference for another user. The vulnerability allows a r ...
Continue Reading
February 17, 2023
The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in some returnurl parameters. A remote attacker can trick the victim to follow a specially crafte ...
Continue Reading
February 17, 2023
The affected product DIAEnergie (versions prior to v1.9.03.001) contains improper authorization, which could allow an unauthorized user to bypass authorization and access privileged functionality.Read ...
Continue Reading
February 17, 2023
The WP Coder â add custom html, css and js code plugin for WordPress is vulnerable to time-based SQL Injection via the âidâ parameter in versions up to, and including, 2.5.3 due to insu ...
Continue Reading
February 17, 2023
A cross-site scripting (XSS) vulnerability in UJCMS v4.1.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter under the Add New Articles f ...
Continue Reading
February 17, 2023
Authentication vulnerability in MOSN v.0.23.0 allows attacker to escalate privileges via case-sensitive JWT authorization.Read More ...
Continue Reading
February 17, 2023
Back to Main
