An arbitrary file upload vulnerability in the component /php_action/createProduct.php of Garage Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.Read More ...
Continue Reading
August 31, 2022
Doctor's Appointment System 1.0 is vulnerable to SQL Injection via booking.php has ?id=.Read More ...
Continue Reading
August 31, 2022
Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) via the admin panel. In addition, it leads to takeover the administrator account by stealing the cookie via XSS.Read More ...
Continue Reading
August 31, 2022
Measuresoft ScadaPro Server (Versions prior to 6.8.0.1) uses an unmaintained ActiveX control, which may allow an out-of-bounds write condition while processing a specific project file.Read More ...
Continue Reading
August 31, 2022
Measuresoft ScadaPro Server (All Versions) uses unmaintained ActiveX controls. The controls may allow seven untrusted pointer deference instances while processing a specific project file.Read More ...
Continue Reading
August 31, 2022
Measuresoft ScadaPro Server (All Versions) allows use after free while processing a specific project file.Read More ...
Continue Reading
August 31, 2022
Measuresoft ScadaPro Server and Client (All Versions) do not properly resolve links before file access; this could allow privilege escalation..Read More ...
Continue Reading
August 31, 2022
Measuresoft ScadaPro Server and Client (All Versions) do not properly resolve links before file access; this could allow a denial-of-service condition.Read More ...
Continue Reading
August 31, 2022
Back to Main
