CVE Vulnerability Catalog

A flaw has been found in SourceCodester Student Grades Management System 1.0 in the delete_user function of /admin.php. Manipulation leads to cross site scripting. The attack can be performed remotely and the exploit is publicly available.

A vulnerability was found in code-projects E-Commerce Website 1.0 affecting an unknown function of the file /pages/product_add.php. Manipulation of the prod_name/prod_desc/prod_cost arguments results in cross site scripting. The attack can be launched remotely and the exploit has been made public.

A vulnerability has been found in code-projects E-Commerce Website 1.0 affecting an unknown function of the file /pages/supplier_add.php. Manipulation of the supp_name/supp_address arguments leads to cross site scripting. The attack can be initiated remotely and the exploit has been disclosed to the public.

PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. Prior to version 4.8.0, users with a local account can change their password while logged in. When doing so, all other active sessions are terminated, except for the currently active one. However, the current session's token remains valid and is not refreshed. If an attacker has previously obtained this session token through another vulnerability, changing the password will not invalidate their access. As a result, the attacker can continue to act as the user even after the password has been changed. This vulnerability is fixed in version 4.8.0.

Frappe Learning version 2.39.1 and earlier allows users to add HTML through input fields in the Job Form. This could lead to injection of malicious HTML or JavaScript code.

Frappe Learning, a learning management system, in version 2.39.1 and earlier has a security issue where students were able to access the Quiz Form if they had the URL.

A weakness was identified in Willow CMS up to 1.4.0 in an unknown function of /admin/images/add. Manipulation leads to unrestricted file upload. Remote exploitation is possible and the exploit is publicly available.

A security flaw has been discovered in Willow CMS up to 1.4.0 in the file /admin/articles/add (Add Post Page component). Manipulation of the title/body arguments results in cross site scripting. The attack may be launched remotely and the exploit has been released.

A security flaw has been discovered in shawon100 RUET OJ up to commit 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. The affected element is an unknown function in /details.php. Manipulation of the argument ID results in SQL injection. Remote exploitation is possible. The exploit has been released publicly. The product follows a rolling release approach, so version details are not provided. The vendor was contacted but did not respond.

A SQL injection vulnerability was identified in shawon100 RUET OJ within the file /contestproblem.php, triggered by manipulation of the Name argument. The attack can be launched remotely, and a publicly available exploit might be used. The product operates on a rolling release basis, so no version details are available.

The InventoryGui library for creating chest GUIs for Bukkit/Spigot plugins, in versions before 1.6.5, contains a vulnerability where any plugin using a GUI with the GuiStorageElement and allowing taking out items can allow item duplication when the experimental Bundle item feature is enabled. The vulnerability is resolved in version 1.6.5.

InventoryGui library up to version 1.6.1-SNAPSHOT allows item duplication in any plugin using GuiStorageElement when the experimental Bundle item feature is enabled on the server. The vulnerability is fixed in version 1.6.2-SNAPSHOT.

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.3-SNAPSHOT and earlier contain a vulnerability where GUIs using GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server.

Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotations com.docker.compose.extends or com.docker.compose.envfile, Compose joins the attacker-supplied value with its local cache directory and writes the file there. An attacker can escape the cache directory and overwrite arbitrary files on the machine running docker compose, even with read-only commands.

PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. PILOS before 4.8.0 exposes the PHP version via the X-Powered-By header, enabling attackers to fingerprint the server and assess potential exploits.

CORS misconfiguration in PILOS before 4.8.0: reflects the Origin header in Access-Control-Allow-Origin without validation, with Access-Control-Allow-Credentials set to true. However, Laravel's session protections make typical deployments not exploitable.

In RUET OJ (shawon100 project) up to version 18fa45b0a669fa1098a0b8fc629cf6856369d9a5, there is an SQL injection vulnerability in /description.php via manipulation of the ID argument. The attack can be initiated remotely, and the exploit has been publicly disclosed. The product uses a rolling release model, so specific affected or fixed versions are not available.

Wykryto podatność w shawon100 RUET OJ do wersji 18fa45b0a669fa1098a0b8fc629cf6856369d9a5, która dotyczy nieznanego kodu w pliku /process.php komponentu POST Request Handler. Manipulacja argumentem 'un' prowadzi do wstrzykiwania SQL, co umożliwia zdalne przeprowadzenie ataku.

W systemie zarządzania salonem Best Salon Management System w wersji 1.0 odkryto podatność, która dotyczy nieznanej części pliku /panel/forgot-password.php. Manipulacja argumentem email prowadzi do wstrzyknięcia SQL, co może być wykorzystane przez atakującego zdalnie.

W urządzeniu Tenda CH22 w wersji 1.0.0.1 znaleziono lukę, która dotyczy funkcji fromNatStaticSetting w pliku /goform/NatStaticSetting. Manipulacja argumentem strony może prowadzić do przepełnienia bufora, co umożliwia zdalne przeprowadzenie ataku.