CVE-2022-42218 The Open Source SACCO Management System v1.0 is vulnerable to SQL injection.
Sacco Shield is an open source CMS made for marketing and sales teams to manage their leads and customers via the help desk, order management,
CVE-2022-21631 - JD Edwards EnterpriseOne Tools Design Tools SEC Vulnerability Explained
CVE-2022-21631 is a serious vulnerability in Oracle's JD Edwards EnterpriseOne Tools, specifically within the Design Tools SEC component. This flaw exists in all
CVE-2022-39411 Oracle Transportation Management is affected by a vulnerability in versions 6.4.3 and 6.5.1.
603 CVE-2017-32316 352 CSRF 2018-05-15 2018-06-15 604 A remote code execution vulnerability in OCM Remote Control allows an attacker to execute code with elevated privileges
CVE-2022-42188 XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server.
The XSRF-TOKEN cookie is set by the server in response to an X-XSRFToken request received by the client. The XSRF-TOKEN value is stored in the
CVE-2022-41504 An upload vulnerability in the component /php_action/editProductImage.php of Billing System Project v1.0 allows attackers to execute arbitrary code.
In addition, there are other cross site request forgery, SQL injection, and file upload issues. The following are the high level details of the arbitrary
Episode
00:00:00
00:00:00