Riasztások

Ericsson Packet Core Controller (PCC) contains a vulnerability in Access and Mobility Management Function (AMF) where improper input validation can lead to denial of service which may result in...

Priority - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Priority – CWE-552: Files or Directories Accessible to External Parties

Barix – CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Hargal - CWE-284: Improper Access Control

7Twenty - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Servision - CWE-287: Improper Authentication

Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id parameter at admin_room_history.php.

A Cross-Site Request Forgery (CSRF) in the component admin_room_added.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges.