# CWE-707. Every Advisory and CVE whose sources give the weakness CWE-707, newest first. ## Records, newest first (an older page) - [Student Attendance Management System createClass.php cross site scripting](https://agentprime.io/advisories/CVE-2022-4053.md) `CVE-2022-4053` · CVE record: unspecified Student Attendance Management System · CVSS 2.4 Low · Not analysed yet · Published 17 Nov 2022 · Tags: CWE-707 - [Student Attendance Management System createClass.php sql injection](https://agentprime.io/advisories/CVE-2022-4052.md) `CVE-2022-4052` · CVE record: unspecified Student Attendance Management System · CVSS 4.7 Medium · Not analysed yet · Published 17 Nov 2022 · Tags: CWE-707 - [Hostel Searching Project view-property.php sql injection](https://agentprime.io/advisories/CVE-2022-4051.md) `CVE-2022-4051` · CVE record: unspecified Hostel Searching Project · CVSS 6.3 Medium · Not analysed yet · Published 17 Nov 2022 · Tags: CWE-707 - [Sports Club Management System make_payments.php sql injection](https://agentprime.io/advisories/CVE-2022-4015.md) `CVE-2022-4015` · CVE record: unspecified Sports Club Management System · CVSS 4.7 Medium · Not analysed yet · Published 16 Nov 2022 · Tags: CWE-707 - [Hospital Management Center patient-info.php sql injection](https://agentprime.io/advisories/CVE-2022-4012.md) `CVE-2022-4012` · CVE record: unspecified Hospital Management Center · CVSS 6.3 Medium · Not analysed yet · Published 16 Nov 2022 · Tags: CWE-707 - [Simple History Plugin Header neutralization for logs](https://agentprime.io/advisories/CVE-2022-4011.md) `CVE-2022-4011` · CVE record: unspecified Simple History Plugin · CVSS 6.5 Medium · Not analysed yet · Published 16 Nov 2022 · Tags: CWE-707 - [MonikaBrzica scm uredi_korisnika.php sql injection](https://agentprime.io/advisories/CVE-2022-3998.md) `CVE-2022-3998` · CVE record: MonikaBrzica scm · CVSS 6.3 Medium · Not analysed yet · Published 15 Nov 2022 · Tags: CWE-707 - [MonikaBrzica scm upis_u_bazu.php sql injection](https://agentprime.io/advisories/CVE-2022-3997.md) `CVE-2022-3997` · CVE record: MonikaBrzica scm · CVSS 6.3 Medium · Not analysed yet · Published 15 Nov 2022 · Tags: CWE-707 - [SourceCodester Sanitization Management System Banner Image cross site scripting](https://agentprime.io/advisories/CVE-2022-3992.md) `CVE-2022-3992` · CVE record: SourceCodester Sanitization Management System · CVSS 2.4 Low · Not analysed yet · Published 14 Nov 2022 · Tags: CWE-707 - [Frappe Search navbar_search.html cross site scripting](https://agentprime.io/advisories/CVE-2022-3988.md) `CVE-2022-3988` · CVE record: unspecified Frappe · CVSS 3.5 Low · Not analysed yet · Published 14 Nov 2022 · Tags: CWE-707 - [NukeView CMS vulnerable to Cross-site Scripting](https://agentprime.io/advisories/GHSA-x45f-j34v-75xm.md) `GHSA-x45f-j34v-75xm`, `CVE-2022-3975`, `PKSA-5mzr-m6h8-h2rv` · Packagist `nukeviet/nukeviet`: affected `<4.5`, fixed in `4.5` · CVSS 3.5 Low · Not analysed yet · Published 13 Nov 2022 · Tags: Cross-site scripting (XSS), CWE-707 - [Matrix-appservice-irc vulnerable to sql injection via roomIds argument](https://agentprime.io/advisories/GHSA-ffwf-47x2-jpr8.md) `GHSA-ffwf-47x2-jpr8`, `CVE-2022-3971` · npm `matrix-appservice-irc`: affected `<0.36.0`, fixed in `0.36.0` · CVSS 4.6 Medium · Not analysed yet · Published 13 Nov 2022 · Tags: SQL injection, CWE-707 - [Pingkon HMS-PHP Data Pump Metadata admin.php sql injection](https://agentprime.io/advisories/CVE-2022-3973.md) `CVE-2022-3973` · CVE record: Pingkon HMS-PHP · CVSS 7.3 High · Not analysed yet · Published 13 Nov 2022 · Tags: CWE-707 - [Pingkon HMS-PHP adminlogin.php sql injection](https://agentprime.io/advisories/CVE-2022-3972.md) `CVE-2022-3972` · CVE record: Pingkon HMS-PHP · CVSS 7.3 High · Not analysed yet · Published 13 Nov 2022 · Tags: CWE-707 - [emlog article_save.php cross site scripting](https://agentprime.io/advisories/CVE-2022-3968.md) `CVE-2022-3968` · CVE record: unspecified emlog · CVSS 3.5 Low · Not analysed yet · Published 13 Nov 2022 · Tags: CWE-707 - [Vesta Control Panel sed main.sh argument injection](https://agentprime.io/advisories/CVE-2022-3967.md) `CVE-2022-3967` · CVE record: unspecified Vesta Control Panel · CVSS 5.3 Medium · Not analysed yet · Published 13 Nov 2022 · Tags: CWE-707 - [gnuboard5 FAQ Key ID faq.php cross site scripting](https://agentprime.io/advisories/CVE-2022-3963.md) `CVE-2022-3963` · CVE record: unspecified gnuboard5 · CVSS 3.5 Low · Not analysed yet · Published 12 Nov 2022 · Tags: CWE-707 - [tsruban HHIMS Patient Portrait sql injection](https://agentprime.io/advisories/CVE-2022-3956.md) `CVE-2022-3956` · CVE record: tsruban HHIMS · CVSS 6.3 Medium · Not analysed yet · Published 11 Nov 2022 · Tags: CWE-707 - [tholum crm42 Login class.user.php sql injection](https://agentprime.io/advisories/CVE-2022-3955.md) `CVE-2022-3955` · CVE record: tholum crm42 · CVSS 7.3 High · Not analysed yet · Published 11 Nov 2022 · Tags: CWE-707 - [sanluan PublicCMS Tab dwz.min.js initLink cross site scripting](https://agentprime.io/advisories/CVE-2022-3950.md) `CVE-2022-3950` · CVE record: sanluan PublicCMS · CVSS 3.5 Low · Not analysed yet · Published 11 Nov 2022 · Tags: CWE-707 - [Sourcecodester Simple Cashiering System User Account cross site scripting](https://agentprime.io/advisories/CVE-2022-3949.md) `CVE-2022-3949` · CVE record: Sourcecodester Simple Cashiering System · CVSS 3.5 Low · Not analysed yet · Published 11 Nov 2022 · Tags: CWE-707 - [eolinker goku_lite getList sql injection](https://agentprime.io/advisories/CVE-2022-3948.md) `CVE-2022-3948` · CVE record: eolinker goku_lite · CVSS 6.3 Medium · Not analysed yet · Published 11 Nov 2022 · Tags: CWE-707 - [eolinker goku_lite list sql injection](https://agentprime.io/advisories/CVE-2022-3947.md) `CVE-2022-3947` · CVE record: eolinker goku_lite · CVSS 6.3 Medium · Not analysed yet · Published 11 Nov 2022 · Tags: CWE-707 - [ForU CMS cms_chip.php cross site scripting](https://agentprime.io/advisories/CVE-2022-3943.md) `CVE-2022-3943` · CVE record: ForU CMS · CVSS 3.5 Low · Not analysed yet · Published 11 Nov 2022 · Tags: CWE-707 - [SourceCodester Sanitization Management System cross site scripting](https://agentprime.io/advisories/CVE-2022-3942.md) `CVE-2022-3942` · CVE record: SourceCodester Sanitization Management System · CVSS 4.3 Medium · Not analysed yet · Published 11 Nov 2022 · Tags: CWE-707 - [Activity Log Plugin HTTP Header neutralization for logs](https://agentprime.io/advisories/CVE-2022-3941.md) `CVE-2022-3941` · CVE record: unspecified Activity Log Plugin · CVSS 5.3 Medium · Not analysed yet · Published 11 Nov 2022 · Tags: CWE-707 - [Maxon ERP browse_data sql injection](https://agentprime.io/advisories/CVE-2022-3878.md) `CVE-2022-3878` · CVE record: Maxon ERP · CVSS 7.3 High · Not analysed yet · Published 7 Nov 2022 · Tags: CWE-707 - [SourceCodester Sanitization Management System sql injection](https://agentprime.io/advisories/CVE-2022-3868.md) `CVE-2022-3868` · CVE record: SourceCodester Sanitization Management System · CVSS 4.7 Medium · Not analysed yet · Published 5 Nov 2022 · Tags: CWE-707 - [Tribal Systems Zenario CMS vulnerable to Cross-site Scripting](https://agentprime.io/advisories/GHSA-f92p-f8r2-c87q.md) `GHSA-f92p-f8r2-c87q`, `CVE-2020-36608`, `PKSA-qt87-xrbp-66kt` · Packagist `tribalsystems/zenario`: affected `<8.5.51340`, fixed in `8.5.51340` · CVSS 3.5 Low · Not analysed yet · Published 3 Nov 2022 · Tags: Cross-site scripting (XSS), CWE-707 - [Centreon vulnerable to SQL Injection](https://agentprime.io/advisories/GHSA-j5wx-jvw3-j363.md) `GHSA-j5wx-jvw3-j363`, `CVE-2022-3827`, `PKSA-bcws-c8z3-x4hd` · Packagist `centreon/centreon`: affected `<22.10.0-beta1`, fixed in `22.10.0-beta1` · CVSS 6.3 Medium · Not analysed yet · Published 2 Nov 2022 · Tags: SQL injection, CWE-707 - [phpipam Import Preview import-load-data.php cross site scripting](https://agentprime.io/advisories/CVE-2022-3845.md) `CVE-2022-3845` · CVE record: unspecified phpipam · CVSS 2.4 Low · Not analysed yet · Published 2 Nov 2022 · Tags: CWE-707 - [Huaxia ERP User Management sql injection](https://agentprime.io/advisories/CVE-2022-3825.md) `CVE-2022-3825` · CVE record: Huaxia ERP · CVSS 6.3 Medium · Not analysed yet · Published 2 Nov 2022 · Tags: CWE-707 - [node-red-dashboard vulnerable to Cross-site Scripting](https://agentprime.io/advisories/GHSA-vrv9-3x3w-ffxw.md) `GHSA-vrv9-3x3w-ffxw`, `CVE-2022-3783` · npm `node-red-dashboard`: affected `<3.2.0`, fixed in `3.2.0` · CVSS 3.5 Low · Not analysed yet · Published 1 Nov 2022 · Tags: Cross-site scripting (XSS), CWE-707 - [eolinker apinto-dashboard login cross site scripting](https://agentprime.io/advisories/CVE-2022-3804.md) `CVE-2022-3804` · CVE record: eolinker apinto-dashboard · CVSS 4.3 Medium · Not analysed yet · Published 1 Nov 2022 · Tags: CWE-707 - [eolinker apinto-dashboard cross site scripting](https://agentprime.io/advisories/CVE-2022-3803.md) `CVE-2022-3803` · CVE record: eolinker apinto-dashboard · CVSS 3.5 Low · Not analysed yet · Published 1 Nov 2022 · Tags: CWE-707 - [Tim Campus Confession Wall share.php sql injection](https://agentprime.io/advisories/CVE-2022-3789.md) `CVE-2022-3789` · CVE record: Tim Campus Confession Wall · CVSS 5.5 Medium · Not analysed yet · Published 1 Nov 2022 · Tags: CWE-707 - [SourceCodester Web-Based Student Clearance System edit-admin.php sql injection](https://agentprime.io/advisories/CVE-2022-3733.md) `CVE-2022-3733` · CVE record: SourceCodester Web-Based Student Clearance System · CVSS 5.0 Medium · Not analysed yet · Published 28 Oct 2022 · Tags: CWE-707 - [seccome Ehoney set sql injection](https://agentprime.io/advisories/CVE-2022-3732.md) `CVE-2022-3732` · CVE record: seccome Ehoney · CVSS 6.3 Medium · Not analysed yet · Published 28 Oct 2022 · Tags: CWE-707 - [seccome Ehoney token sql injection](https://agentprime.io/advisories/CVE-2022-3731.md) `CVE-2022-3731` · CVE record: seccome Ehoney · CVSS 6.3 Medium · Not analysed yet · Published 28 Oct 2022 · Tags: CWE-707 - [seccome Ehoney falco sql injection](https://agentprime.io/advisories/CVE-2022-3730.md) `CVE-2022-3730` · CVE record: seccome Ehoney · CVSS 6.3 Medium · Not analysed yet · Published 28 Oct 2022 · Tags: CWE-707 - [seccome Ehoney attack sql injection](https://agentprime.io/advisories/CVE-2022-3729.md) `CVE-2022-3729` · CVE record: seccome Ehoney · CVSS 6.3 Medium · Not analysed yet · Published 28 Oct 2022 · Tags: CWE-707 - [Cross-site Scripting in actionpack](https://agentprime.io/advisories/GHSA-9chr-4fjh-5rgw.md) `GHSA-9chr-4fjh-5rgw`, `CVE-2022-3704` · RubyGems `actionpack`: affected `<=7.0.4`, no fixed version yet · CVSS 3.5 Low · Withdrawn · Not analysed yet · Published 27 Oct 2022 · Tags: Cross-site scripting (XSS), CWE-707 - [SourceCodester Online Medicine Ordering System cross site scripting](https://agentprime.io/advisories/CVE-2022-3716.md) `CVE-2022-3716` · CVE record: SourceCodester Online Medicine Ordering System · CVSS 3.5 Low · Not analysed yet · Published 27 Oct 2022 · Tags: CWE-707 - [SourceCodester Online Medicine Ordering System sql injection](https://agentprime.io/advisories/CVE-2022-3714.md) `CVE-2022-3714` · CVE record: SourceCodester Online Medicine Ordering System · CVSS 5.0 Medium · Not analysed yet · Published 27 Oct 2022 · Tags: CWE-707 - [SourceCodester Sanitization Management System Master.php cross site scripting](https://agentprime.io/advisories/CVE-2022-3673.md) `CVE-2022-3673` · CVE record: SourceCodester Sanitization Management System · CVSS 3.5 Low · Not analysed yet · Published 26 Oct 2022 · Tags: CWE-707 - [SourceCodester Sanitization Management System SystemSettings.php cross site scripting](https://agentprime.io/advisories/CVE-2022-3672.md) `CVE-2022-3672` · CVE record: SourceCodester Sanitization Management System · CVSS 3.5 Low · Not analysed yet · Published 26 Oct 2022 · Tags: CWE-707 - [SourceCodester Simple Cold Storage Management System My Account cross site scripting](https://agentprime.io/advisories/CVE-2022-3587.md) `CVE-2022-3587` · CVE record: SourceCodester Simple Cold Storage Management System · CVSS 3.5 Low · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-707 - [SourceCodester Canteen Management System edituser.php sql injection](https://agentprime.io/advisories/CVE-2022-3584.md) `CVE-2022-3584` · CVE record: SourceCodester Canteen Management System · CVSS 6.3 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-707 - [SourceCodester Canteen Management System login.php sql injection](https://agentprime.io/advisories/CVE-2022-3583.md) `CVE-2022-3583` · CVE record: SourceCodester Canteen Management System · CVSS 7.3 High · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-707 - [SourceCodester Cashier Queuing System Cashiers Tab cross site scripting](https://agentprime.io/advisories/CVE-2022-3581.md) `CVE-2022-3581` · CVE record: SourceCodester Cashier Queuing System · CVSS 2.4 Low · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-707 - [SourceCodester Cashier Queuing System User Creation cross site scripting](https://agentprime.io/advisories/CVE-2022-3580.md) `CVE-2022-3580` · CVE record: SourceCodester Cashier Queuing System · CVSS 2.4 Low · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-707 - [SourceCodester Cashier Queuing System Login Page login.php sql injection](https://agentprime.io/advisories/CVE-2022-3579.md) `CVE-2022-3579` · CVE record: SourceCodester Cashier Queuing System · CVSS 6.3 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-707 - [SourceCodester Simple Cold Storage Management System Add New Storage cross site scripting](https://agentprime.io/advisories/CVE-2022-3548.md) `CVE-2022-3548` · CVE record: SourceCodester Simple Cold Storage Management System · CVSS 2.4 Low · Not analysed yet · Published 17 Oct 2022 · Tags: CWE-707 - [SourceCodester Simple Cold Storage Management System Setting cross site scripting](https://agentprime.io/advisories/CVE-2022-3547.md) `CVE-2022-3547` · CVE record: SourceCodester Simple Cold Storage Management System · CVSS 2.4 Low · Not analysed yet · Published 17 Oct 2022 · Tags: CWE-707 - [SourceCodester Simple Cold Storage Management System Create User cross site scripting](https://agentprime.io/advisories/CVE-2022-3546.md) `CVE-2022-3546` · CVE record: SourceCodester Simple Cold Storage Management System · CVSS 2.4 Low · Not analysed yet · Published 17 Oct 2022 · Tags: CWE-707 - [SourceCodester Sanitization Management System Quote Requests Tab cross site scripting](https://agentprime.io/advisories/CVE-2022-3519.md) `CVE-2022-3519` · CVE record: SourceCodester Sanitization Management System · CVSS 2.4 Low · Not analysed yet · Published 15 Oct 2022 · Tags: CWE-707 - [SourceCodester Sanitization Management System User Creation cross site scripting](https://agentprime.io/advisories/CVE-2022-3518.md) `CVE-2022-3518` · CVE record: SourceCodester Sanitization Management System · CVSS 2.4 Low · Not analysed yet · Published 15 Oct 2022 · Tags: CWE-707 - [SourceCodester Sanitization Management System cross site scripting](https://agentprime.io/advisories/CVE-2022-3505.md) `CVE-2022-3505` · CVE record: SourceCodester Sanitization Management System · CVSS 3.5 Low · Not analysed yet · Published 14 Oct 2022 · Tags: CWE-707 - [SourceCodester Sanitization Management System sql injection](https://agentprime.io/advisories/CVE-2022-3504.md) `CVE-2022-3504` · CVE record: SourceCodester Sanitization Management System · CVSS 6.3 Medium · Not analysed yet · Published 14 Oct 2022 · Tags: CWE-707 - [SourceCodester Purchase Order Management System Supplier cross site scripting](https://agentprime.io/advisories/CVE-2022-3503.md) `CVE-2022-3503` · CVE record: SourceCodester Purchase Order Management System · CVSS 3.5 Low · Not analysed yet · Published 14 Oct 2022 · Tags: CWE-707 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .