CVE-2022-39398 - How a Kanban Plugin Made GLPI Vulnerable to Cross-site Scripting (XSS)
GLPI is a well-known open source IT and asset management solution. Many teams use its features for handling tickets, resources, and even project planning. To
CVE-2022-43058 - SQL Injection in Online Diagnostic Lab Management System v1. – Technical Analysis and Exploit Guide
In October 2022, a critical SQL injection vulnerability was identified in the Online Diagnostic Lab Management System (ODLMS) v1.. Tracked as CVE-2022-43058, this vulnerability allows
CVE-2022-43121 An XSS vulnerability in the CMS Field Add page of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web script or HTML.
This issue is rated as critical due to the possibility of remote code execution and data injection. Attackers can exploit this vulnerability to steal cookie-based
CVE-2022-43277 Canteen Management System v1.0 had an arbitrary file upload vulnerability.
Attackers can upload a PHP script to execute code on the server. The file upload feature is enabled by default in Canteen. Note that this
CVE-2022-43291 - SQL Injection in Canteen Management System v1. (`/youthappam/editclient.php` id Parameter) – Analysis, Exploit & Remediation
In 2022, a serious SQL injection vulnerability (CVE-2022-43291) was found in Canteen Management System v1.. This bug lets attackers mess with the database just by
Episode
00:00:00
00:00:00