CVE Vulnerability Catalog

A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654. Impacted is an unknown function of the component Make a Reservation. This manipulation of the argument selected_date causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability was found in ADSLR NBR1005GPEV2 250814-r037c. This issue affects the function set_mesh_disconnect of the file /send_order.cgi. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability has been found in ADSLR NBR1005GPEV2 250814-r037c. This vulnerability affects the function ap_macfilter_del of the file /send_order.cgi. The manipulation of the argument mac leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A flaw was found in ADSLR NBR1005GPEV2 version 250814-r037c affecting the ap_macfilter_add function in /send_order.cgi. Manipulating the mac argument leads to command injection. The attack can be performed remotely and the exploit has been published.

A vulnerability was detected in ADSLR B-QE2W401 250814-r037c. Affected by this issue is the function parameterdel_swifimac of the file /send_order.cgi. Performing manipulation of the argument del_swifimac results in command injection. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A security vulnerability has been detected in deco-cx apps up to 0.120.1. The AnalyticsScript function in the file website/loaders/analyticsScript.ts of the Parameter Handler component allows manipulation of the url argument, leading to Server-Side Request Forgery (SSRF). The attack can be executed remotely, and the exploit has been publicly disclosed.

A weakness has been identified in winston-dsouza Ecommerce-Website up to a specific commit. An unknown functionality in the file /includes/header_menu.php of the GET Parameter Handler component allows manipulation of the Error argument, leading to Cross-Site Scripting (XSS). The attack can be executed remotely, and the exploit has been made public.

A vulnerability was identified in Scada-LTS up to 2.7.8.1. Affected is the function Common.getHomeDir of the file br/org/scadabr/vo/exporter/ZIPProjectManager.java of the component Project Import. Such manipulation leads to path traversal. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was determined in Scada-LTS up to 2.7.8.1. An unknown function is vulnerable to Cross-Site Request Forgery (CSRF). The attack may be initiated remotely, and the exploit has been publicly disclosed.

A vulnerability was found in ZenTao up to 21.7.6-8564. The makeRequest function in the file module/ai/model.php allows manipulation of the Base argument, leading to Server-Side Request Forgery (SSRF). The attack can be launched remotely, and the exploit has been made public.

A flaw has been found in ZenTao up to 21.7.6-8564. The affected element is the function file::delete of the file module/file/control.php of the component File Handler. Executing manipulation of the argument fileID can lead to improper privilege management. It is possible to launch the attack remotely. Upgrading to version 21.7.7 is sufficient to fix this issue.

A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.5. This issue affects some unknown processing of the file /user/profile of the component Image Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

A SQL injection vulnerability was found in taosir WTCMS within the CommentadminController (file application/Comment/Controller/CommentadminController.class.php). Manipulation of the ids argument in the check/uncheck/delete functions allows SQL injection. The exploit has been publicly released and the attack can be performed remotely.

HTCondor Access Point before 25.3.1 allows an authenticated user to impersonate other users on the local machine by submitting a batch job. This is fixed in 24.12.14, 25.0.3, and 25.3.1. The earliest affected version is 24.7.3.

In Oxide control plane versions 15 through 17 before 17.1, API tokens can be renewed past their expiration date. This may allow continued use of tokens that should already be invalid.

Tryton trytond 6.0 before 7.6.11 does not enforce access rights for data export. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

Tryton trytond before version 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information. This is fixed in versions 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

Tryton sao (aka tryton-sao) before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69.

Tryton sao (aka tryton-sao) before 7.6.9 allows XSS via an HTML attachment. This is fixed in 7.6.9, 7.4.19, 7.0.38, and 6.0.67.

OrangeHRM versions 5.0 to 5.7 have an interview attachment retrieval endpoint in the Recruitment module that serves files based solely on an authenticated session and user-supplied identifiers, without verifying permission to access the associated interview record. An ESS-level user with no recruitment access can retrieve confidential documents such as candidate CVs and evaluations.