‼ CVE-2022-28427 ‼
📖 Read
via "National Vulnerability Database".
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28008 ‼
📖 Read
via "National Vulnerability Database".
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendance_delete.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28426 ‼
📖 Read
via "National Vulnerability Database".
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=edit&roleid=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28436 ‼
📖 Read
via "National Vulnerability Database".
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Hide&userid=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28433 ‼
📖 Read
via "National Vulnerability Database".
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Show&userid=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28423 ‼
📖 Read
via "National Vulnerability Database".
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=delete.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28445 ‼
📖 Read
via "National Vulnerability Database".
KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28444 ‼
📖 Read
via "National Vulnerability Database".
UCMS v1.6 was discovered to contain an arbitrary file read vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28439 ‼
📖 Read
via "National Vulnerability Database".
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&&action=delete&userid=4.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28424 ‼
📖 Read
via "National Vulnerability Database".
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&find=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27478 ‼
📖 Read
via "National Vulnerability Database".
Victor v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component admin/profile.php?section=admin.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28425 ‼
📖 Read
via "National Vulnerability Database".
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=display&value=1&roleid=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28010 ‼
📖 Read
via "National Vulnerability Database".
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\overtime_delete.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28438 ‼
📖 Read
via "National Vulnerability Database".
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=User&userid=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28429 ‼
📖 Read
via "National Vulnerability Database".
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28440 ‼
📖 Read
via "National Vulnerability Database".
An arbitrary file upload vulnerability in UCMS v1.6 allows attackers to execute arbitrary code via a crafted PHP file.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28432 ‼
📖 Read
via "National Vulnerability Database".
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=display&value=0&sid=2.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28028 ‼
📖 Read
via "National Vulnerability Database".
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=delete_amenity.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28422 ‼
📖 Read
via "National Vulnerability Database".
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=edit.📖 Read
via "National Vulnerability Database".
🕴 Zero-Day Exploit Use Exploded in 2021 🕴
📖 Read
via "Dark Reading".
Ransomware and other financially motivated threat actors joined nation-state-backed groups in leveraging unpatched flaws in attack campaigns, new data shows.📖 Read
via "Dark Reading".
Dark Reading
Zero-Day Exploit Use Exploded in 2021
Ransomware and other financially motivated threat actors joined nation-state-backed groups in leveraging unpatched flaws in attack campaigns, new data shows.
‼ CVE-2022-29577 ‼
📖 Read
via "National Vulnerability Database".
OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content. NOTE: this issue exists because of an incomplete fix for CVE-2022-28367.📖 Read
via "National Vulnerability Database".