CVE Vulnerabilities Archive - Page 17372 of 18763

CVE-2022-25396

February 23, 2023 by godfreyd94

Cosmetics and Beauty Product Online Store v1.0 was discovered to contain a SQL injection vulnerability via the search parameter.

CVE-2022-25395

February 23, 2023 by godfreyd94

Cosmetics and Beauty Product Online Store v1.0 was discovered to contain multiple reflected cross-site scripting (XSS) attacks via the search parameter under the /cbpos/ app.

CVE-2022-25394

February 23, 2023 by godfreyd94

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php.

CVE-2022-25393

February 23, 2023 by godfreyd94

Simple Bakery Shop Management v1.0 was discovered to contain a SQL injection vulnerability via the username parameter.

CVE-2022-25390

February 23, 2023 by godfreyd94

DCN Firewall DCME-520 was discovered to contain a remote command execution (RCE) vulnerability via the host parameter in the file /system/tool/ping.php.

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1, allowed a project member to filter issues by contact and organization.