CVE Vulnerability Catalog

The GrandSlambert Login Configurator plugin versions <= 2.1 has a stored Cross-Site Scripting (XSS) vulnerability with authentication (admin+).

The Five Star Restaurant Reservations plugin versions <= 2.6.7 has an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious scripts.

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project, leading to resources that are unconstrained by the user's quota.

An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s file storage.

The Recent Posts Slider plugin by Neha Goel in versions <= 1.1 has an unauthenticated stored Cross-Site Scripting (XSS) vulnerability.

The PluginForage WooCommerce Product Categories Selection Widget plugin versions <= 2.0 has an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious scripts.

Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message.

A vulnerability has been found in Campcodes Beauty Salon Management System 1.0 that allows cross site scripting via manipulation of the id argument in the /admin/edit-accepted-appointment.php file. The attack can be initiated remotely.

A vulnerability was found in Campcodes Beauty Salon Management System 1.0 that allows cross-site scripting (XSS) attacks through manipulation of the adminname argument in the /admin/admin-profile.php file.

A vulnerability was found in Campcodes Beauty Salon Management System 1.0 that allows cross site scripting (XSS) attacks through manipulation of the searchdata argument in the /admin/search-appointment.php file. The attack can be launched remotely.

A vulnerability was found in Campcodes Beauty Salon Management System 1.0 that allows cross-site scripting (XSS) attacks through manipulation of the inv_id argument in the /admin/invoice.php file.

CVE-2023-35088 describes an improper neutralization of special elements used in an SQL command vulnerability in Apache InLong, which may lead to SQL injection attacks. The issue affects versions from 1.4.0 through 1.7.0.

A vulnerability related to the deserialization of untrusted data in Apache InLong allows an attacker to bypass current logic and achieve arbitrary file reading. This affects versions from 1.4.0 to 1.7.0.

The 'Exposure of Resource to Wrong Sphere' vulnerability in Apache InLong (versions 1.4.0 to 1.7.0) allows an attacker to use general users to delete and update processes that should only be operable by admins.

A vulnerability was found in Campcodes Beauty Salon Management System 1.0 that allows cross site scripting attacks through manipulation of the id argument in the /admin/edit_category.php file.

The vulnerability in Infodrom's E-Invoice Approval System involves storing passwords in plaintext, allowing sensitive strings to be read within an executable.

The Infodrom Software E-Invoice Approval System has an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. This issue affects versions of the system before 20230701.

A vulnerability has been found in Campcodes Beauty Salon Management System 1.0, allowing cross site scripting through manipulation of the id argument in the /admin/edit_product.php file. The attack can be initiated remotely.

A vulnerability classified as problematic was found in Campcodes Beauty Salon Management System 1.0. Manipulation of the 'name' argument in the /admin/add-category.php file leads to cross site scripting.