Security
Headlines
HeadlinesLatestCVEs

Tag

#php

New ODGen Tool Unearths 180 Zero-Days in Node.js Libraries

New graph-based tool offers a better alternative to current approaches for finding vulnerabilities in JavaScript code, they note.

DARKReading
Open in Source
#xss#vulnerability#nodejs#js#git#java#php#c++#auth#zero_day
CVE-2022-36748: XX vulnerability in index.php · Issue #80 · xiebruce/PicUploader

PicUploader v2.6.3 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /master/index.php.

CVE-2022-36749: 🐛 | Command Injection and XSS vulnerabilities reports · Issue #1859 · MiczFlor/RPi-Jukebox-RFID

RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/Files.php. This vulnerability is exploited via a crafted payload injected into the file name of an uploaded file.

CVE-2022-36747: XSS vulnerability · Issue #176 · cobub/razor

Razor v0.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the function uploadchannel().

CVE-2022-36746: Security fixes XSS in oxidized-cfg-check.inc.php and print-customoid.php by enferas · Pull Request #14126 · librenms/librenms

LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component oxidized-cfg-check.inc.php.

CVE-2022-36734: bug_report/SQLi-24.md at main · k0xx11/bug_report

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /admin/delstu.php.

CVE-2022-36733: bug_report/SQLi-22.md at main · k0xx11/bug_report

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /admin/del.php.

CVE-2022-36735: bug_report/SQLi-23.md at main · k0xx11/bug_report

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admin/delete.php.

CVE-2022-36732: bug_report/SQLi-19.md at main · k0xx11/bug_report

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /librarian/dele.php.

CVE-2022-36657: bug_report/XSS-1.md at main · z1pwn/bug_report

Library Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /librarian/edit_book_details.php.