Tag
#git
Computer Laboratory Management System version 1.0 suffers from an insecure direct object reference vulnerability.
Hospital Management System version 1.0 suffers from a persistent cross site scripting vulnerability.
E-Insurance version 1.0 suffers from a persistent cross site scripting vulnerability.
GL-iNet MT6000 version 4.5.5 suffers from an arbitrary file download vulnerability.
Daily Habit Tracker version 1.0 suffers from a remote SQL injection vulnerability.
Daily Habit Tracker version 1.0 suffers from a persistent cross site scripting vulnerability.
Employee Management System version 1.0 suffers from additional remote SQL injection vulnerabilities. Original discovery of this finding is attributed to Ozlem Balci in January of 2024.
OpenCart Core version 4.0.2.3 suffers from a remote SQL injection vulnerability.
Online Hotel Booking in PHP version 1.0 suffers from a remote blind SQL injection vulnerability.
For an attacker with pre-existing access to send a signal to a workflow, the attacker can make the signal name a script that executes when a victim views that signal. The XSS is in the timeline page displaying the workflow execution details of the workflow that was sent the crafted signal. Access to send a signal to a workflow is determined by how you configured the authorizer on your server. This includes any entity with permission to directly call SignalWorkflowExecution or SignalWithStartWorkflowExecution, or any entity can deploy a worker that has access to call workflow progress APIs (specifically RespondWorkflowTaskCompleted).