CVE Vulnerability Catalog

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity providers. This allows a delegated client administrator to leak a user's upstream bearer tokens into the tokens issued to their managed application.

A flaw was found in the X.509 client-certificate authenticator of Keycloak. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate that points to a malicious server, causing Keycloak to make unauthorized outbound requests to internal or external endpoints before the certificate is fully validated.

A vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown part of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminAuthController.java of the Login Endpoint component. The manipulation results in improper restriction of excessive authentication attempts. The attack may be performed remotely, though it is highly complex and difficult to exploit. The exploit is now public and may be used; the project has not responded to the issue report.

A vulnerability has been found in kishor-23 food-waste-management-system. This affects an unknown function of the file login.php of the Login Flow component. Manipulation of the PHPSESSID argument leads to session fixation, and the attack can be launched remotely. The exploit has been disclosed to the public and may be used; the product does not use versioning, so affected release information is unavailable.

A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file delivery/deliverysignup.php of the component Registration Page. This manipulation of the argument username/email/location causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument email/username/location results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Impacted is an unknown function of the file delivery/deliverymyord.php. The manipulation of the argument delivery_person_id/order_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was identified in kishor-23 food-waste-management-system within signup.php of the User Registration Endpoint component. Manipulating the email/name/gender arguments leads to SQL injection, and the attack can be performed remotely. The exploit is publicly available and may be used for attacks.

Code injection vulnerability in osCommerce2 up to 2.3.4.1. Affects the include function in the file admin/newsletters.php in the Newsletter Management component, where manipulation of the module argument leads to code injection. The attack can be executed remotely, and the exploit is public. The project has not responded.

Code injection vulnerability in osCommerce2 up to 2.3.4.1. Affects the include function in the file includes/classes/payment.php in the Payment Page component, where manipulation of the MODULE_PAYMENT_INSTALLED argument leads to code injection. The attack can be executed remotely, and the exploit is public. The project has not responded.

A cross-site scripting vulnerability was found in code-projects Human Resource Management System 1.0 in an unknown functionality of /views/admin/liveEventHistory.php (Live Event History component). Manipulating the eventSubject argument results in cross-site scripting. The attack may be launched remotely and the exploit has been made public.

SQL injection vulnerability in itsourcecode Online Admission System 1.0. Affects the file /admin/key.php, where manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely, and the exploit is public.

SQL injection vulnerability in itsourcecode Online Admission System 1.0. Affects the file /new.php, where manipulation of the schedid argument leads to SQL injection. The attack can be executed remotely, and the exploit is public.

A vulnerability was detected in itsourcecode Online Admission System 1.0 affecting an unknown function of /admin/examinee.php. Manipulating the ID argument results in SQL injection, and the attack can be initiated remotely. The exploit is now public and may be used.

A security vulnerability was detected in itsourcecode Online Admission System 1.0 affecting an unknown function of /admin/creteria.php. Manipulating the ID argument leads to SQL injection, and the attack can be launched remotely. The exploit has been publicly disclosed and may be used.

A weakness was identified in itsourcecode Online Admission System 1.0 affecting an unknown function of /admin/confirm.php. Manipulating the schedid argument causes SQL injection, and the attack can be initiated remotely. The exploit is publicly available and may be used for attacks.

A security flaw was discovered in SourceCodester Online Reviewer Management System 1.0 affecting an unknown function of /reviewer_0/admins/assessments/activities/btn_functions.php?action=update. Manipulating the Title argument results in SQL injection, and the attack may be performed remotely. The exploit has been released to the public and may be used for attacks.

SQL injection vulnerability in itsourcecode Online Admission System 1.0. Affects the file register1.php, where manipulation of the fname argument leads to SQL injection. The attack can be executed remotely, and the exploit is public.

In the venc component, there is a possible out-of-bounds write due to type confusion. This could lead to local privilege escalation if a malicious actor has already obtained System privilege. User interaction is not needed for exploitation.

In the mtee component, there is a possible privilege escalation due to a missing bounds check. This could lead to local privilege escalation if a malicious actor has already obtained System privilege. User interaction is not needed for exploitation.