Security
Headlines
HeadlinesLatestCVEs

Tag

#pdf

CVE-2023-1963: Bank-locker-Managament-System/search-locker-details.php_SQL_English.pdf at main · vsdwef/Bank-locker-Managament-System

A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php of the component Search. The manipulation of the argument searchinput leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225359.

CVE
#sql#vulnerability#git#php#pdf
CVE-2023-1961: Online-Computer-and-Laptop-Store/Cross site scripting attack at system name setting.pdf at main · boyi0508/Online-Computer-and-Laptop-Store

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/?page=system_info. The manipulation of the argument System Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225348.

CVE-2023-1960: Online-Computer-and-Laptop-Store/SQL injection exists at the deletion point of the category list.pdf at main · boyi0508/Online-Computer-and-Laptop-Store

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php?f=delete_category. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225347.

CVE-2023-1958: Online-Computer-and-Laptop-Store/SQL injection present at subcategory deletion.pdf at main · boyi0508/Online-Computer-and-Laptop-Store

A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file /classes/Master.php?f=delete_sub_category. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225345 was assigned to this vulnerability.

CVE-2023-1949: BP-Monitoring-Management-System/ChangePassword.php_SQL_English.pdf at main · vsdwef/BP-Monitoring-Management-System

A vulnerability, which was classified as critical, was found in PHPGurukul BP Monitoring Management System 1.0. Affected is an unknown function of the file change-password.php of the component Change Password Handler. The manipulation of the argument password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225336.

CVE-2023-1950: BP-Monitoring-Management-System/password-recovery.php_SQL_English.pdf at main · vsdwef/BP-Monitoring-Management-System

A vulnerability has been found in PHPGurukul BP Monitoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file password-recovery.php of the component Password Recovery. The manipulation of the argument emailid/contactno leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225337 was assigned to this vulnerability.

CVE-2023-1909: BP-Monitoring-Management-System/report_English.pdf at main · vsdwef/BP-Monitoring-Management-System

A vulnerability, which was classified as critical, was found in PHPGurukul BP Monitoring Management System 1.0. Affected is an unknown function of the file profile.php of the component User Profile Update Handler. The manipulation of the argument name/mobno leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225318 is the identifier assigned to this vulnerability.

CVE-2023-29475: Unify OpenScape 4000: IT-Sicherheitslücke mit hohem Risiko! Mehrere Schwachstellen ermöglichen Erlangen von Administratorrechten

inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23543.

Threat Source newsletter (April 6, 2023) — Another friendly reminder about supply chain attacks

Be prepared to discuss difficult topics with potential new third-party software vendors, such as incident notification requirements, access to logs during a security incident and who the important emergency contacts are.

CVE-2023-0580

Insecure Storage of Sensitive Information vulnerability in ABB My Control System (on-premise) allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control of the application. Of the services that make up the My Control System (on-premise) application, the following ones are affected by this vulnerability: User Interface System Monitoring1 Asset Inventory This issue affects My Control System (on-premise): from 5.0;0 through 5.13.