NA - CVE-2024-37856 - Cross Site Scripting vulnerability in Lost and...
Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the first, last, middle name fields in the User Profile page.
NA - CVE-2024-37857 - SQL Injection vulnerability in Lost and Found...
SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via id parameter to php-lfis/admin/categories/view_category.php.
NA - CVE-2024-37858 - SQL Injection vulnerability in Lost and Found...
SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter to php-lfis/admin/categories/manage_category.php.
NA - CVE-2024-37859 - Cross Site Scripting vulnerability in Lost and...
Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the page parameter to php-lfis/admin/index.php.
NA - CVE-2024-6578 - A stored cross-site scripting (XSS)...
A stored cross-site scripting (XSS) vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from the improper neutralization of input during web page generation, specifically...