Advisories · Weakness
CWE-707.
Every Advisory and CVE whose sources give the weakness CWE-707, newest first.
- CVSS 6.9 Medium
Codezips Hospital Appointment System doctorAction.php sql injection
- Codezips Hospital Appointment System
- Other injection
- SQL injection
- CVSS 5.3 Medium
PHPGurukul Online Shopping Portal two_tables.php cross site scripting
- PHPGurukul Online Shopping Portal
- Other injection
- Cross-site scripting (XSS)
- CVSS 3.5 Low
Duplicate Advisory: Umbraco CMS Cross-site Scripting vulnerability
- Cross-site scripting (XSS)
- CWE-707
<=12.3.6 · no fixed version yet
GHSA-4gmq-m9vp-jrwg - CVSS 6.9 Medium
Codezips Pet Shop Management System productsadd.php sql injection
- Codezips Pet Shop Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
code-projects University Event Management System submit.php sql injection
- code-projects University Event Management System
- Other injection
- SQL injection
- CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV
Microsoft Management Console Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-707
- CVSS 5.3 Medium
Intelbras InControl Relatório de Operadores Page operador code injection
- Intelbras InControl
- Other injection
- Code injection
- CVSS 6.3 Medium
IBAX go-ibax vulnerable to SQL injection in github.com/IBAX-io/go-ibax
- CWE-707
<1.4.2 · fixed in 1.4.2
GHSA-rwcf-gq22-ph83 · CVE-2022-3800 - CVSS 6.3 Medium
IBAX go-ibax vulnerable to SQL injection in github.com/IBAX-io/go-ibax
- CWE-707
<1.4.2 · fixed in 1.4.2
GHSA-mgqh-3qm7-gx82 · CVE-2022-3798 - CVSS 6.3 Medium
IBAX go-ibax vulnerable to SQL injection in github.com/IBAX-io/go-ibax
- CWE-707
<1.4.2 · fixed in 1.4.2
GHSA-m738-584h-26p6 · CVE-2022-3801 - CVSS 6.3 Medium
IBAX go-ibax vulnerable to SQL injection in github.com/IBAX-io/go-ibax
- CWE-707
<1.4.2 · fixed in 1.4.2
GHSA-g23g-mw97-65c8 · CVE-2022-3802 - CVSS 6.3 Medium
IBAX go-ibax vulnerable to SQL injection in github.com/IBAX-io/go-ibax
- CWE-707
<1.4.2 · fixed in 1.4.2
GHSA-fcgf-j8cf-h2rm · CVE-2022-3799 - CVSS 5.5 Medium
Intel(R) Power Gadget software for Windwos: Improper initialization in some Intel(R) Power Gadget software for Windwos all versions…
- Intel(R) Power Gadget software for Windwos
- CWE-665
- CWE-707
- CVSS 8.8 High
Intel(R) Power Gadget software for Windows: Improper neutralization in Intel(R) Power Gadget software for Windows all versions may…
- Intel(R) Power Gadget software for Windows
- CWE-707
- CVSS 8.8 High
Intel(R) Power Gadget software for macOS: Improper neutralization in Intel(R) Power Gadget software for macOS all versions may…
- Intel(R) Power Gadget software for macOS
- CWE-707
- CVSS 7.8 High
Intel(R) Arc(TM) & Iris(R) Xe Graphics software: Improper neutralization in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before…
- Intel(R) Arc(TM) & Iris(R) Xe Graphics software
- CWE-86
- CWE-707
- CVSS 7.5 High
Improper Neutralization vulnerability affects OpenText ALM Octane.
- OpenText ALM Octane.
- CWE-707
- CVSS 3.5 Low
Graphite Web Cross-site Scripting vulnerability
- Cross-site scripting (XSS)
- CWE-707
<=1.1.10 · no fixed version yet
GHSA-q99p-78hp-xg5c · CVE-2022-4729 - CVSS 3.5 Low
Graphite Web Cross-site Scripting vulnerability
- Cross-site scripting (XSS)
- CWE-707
<=1.1.10 · no fixed version yet
GHSA-m973-4vpc-x43c · CVE-2022-4730 - CVSS 3.5 Low
Graphite Web Cross-site Scripting vulnerability
- Cross-site scripting (XSS)
- CWE-707
<=1.1.10 · no fixed version yet
GHSA-3c5x-4hvx-qrrr · CVE-2022-4728 - CVSS 3.5 Low
OpenMRS Appointment Scheduling Module Notes AppointmentRequest.java getNotes cross site scripting
- OpenMRS Appointment Scheduling Module
- CWE-707
- CVSS 6.3 Medium
SourceCodester Sanitization Management System Admin Login sql injection
- SourceCodester Sanitization Management System
- CWE-707
- CVSS 5.5 Medium
Modern Tribe Panel Builder Plugin SearchFilter.php add_post_content_filtered_to_search_sql sql injection
- Modern Tribe Panel Builder Plugin
- CWE-707
- CVSS 3.5 Low
Mingsoft MCMS Cross-site Scripting vulnerability
- Cross-site scripting (XSS)
- CWE-707
<=5.2.9 · no fixed version yet
GHSA-6rvv-h8g7-728w · CVE-2022-4640 - CVSS 3.5 Low
A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/collective/contact/widget/widgets.py. The ...
- CWE-707
<1.12 · fixed in 1.12
GHSA-5pqf-rvm7-3wgw · CVE-2022-4638 - CVSS 3.5 Low
studygolang vulnerable to cross-site scripting
- Cross-site scripting (XSS)
- CWE-707
<=0.1.0 · no fixed version yet
GHSA-gw62-c7w4-x449 · CVE-2021-4272 - CVSS 3.5 Low
tatoeba2 Profile Name cross site scripting
- tatoeba2
- CWE-707
- CVSS 3.5 Low
WP-Ban ban-options.php cross site scripting
- WP-Ban
- CWE-707
- CVSS 3.5 Low
sileht bird-lg layout.html cross site scripting
- sileht bird-lg
- CWE-707
- CVSS 4.3 Medium
studygolang search.go Search cross site scripting
- studygolang
- CWE-707
- CVSS 3.5 Low
panicsteve w2wiki Markdown index.php toHTML cross site scripting
- panicsteve w2wiki
- CWE-707
- CVSS 3.5 Low
Imprint CMS ViewHelpers.cs SearchForm cross site scripting
- Imprint CMS
- CWE-707
- CVSS 3.5 Low
SimpleRisk common.js checkAndSetValidation cross site scripting
- SimpleRisk
- CWE-707
- CVSS 3.5 Low
tad_discuss cross site scripting
- tad_discuss
- CWE-707
- CVSS 3.5 Low
Webdetails cpf DependenciesPackage.java cross site scripting
- Webdetails cpf
- CWE-707
- CVSS 3.5 Low
siwapp-ror cross site scripting
- siwapp-ror
- CWE-707
- CVSS 3.5 Low
chedabob whatismyudid mobileconfig.js exports.enrollment cross site scripting
- chedabob whatismyudid
- CWE-707
- CVSS 5.5 Medium
laravel-jqgrid vulnerable to SQL Injection
- SQL injection
- CWE-707
<=1.3.0 · no fixed version yet
GHSA-3fhj-wpvj-x5w8 · CVE-2021-4262 - CVSS 3.5 Low
Click Studios Passwordstate URL Field cross site scripting
- Click Studios Passwordstate
- Click Studios Passwordstate Browser Extension Chrome
- CWE-707
- CVSS 6.3 Medium
pacman-canvas db-handler.php addHighscore sql injection
- pacman-canvas
- CWE-707
- CVSS 3.5 Low
Shoplazza LifeStyle Review Flow cross site scripting
- Shoplazza LifeStyle
- CWE-707
- CVSS 3.5 Low
Shoplazza LifeStyle Shipping/Member Discount/Icon cross site scripting
- Shoplazza LifeStyle
- CWE-707
- CVSS 3.5 Low
Shoplazza LifeStyle Product Carousel cross site scripting
- Shoplazza LifeStyle
- CWE-707
- CVSS 3.5 Low
Shoplazza LifeStyle Product cross site scripting
- Shoplazza LifeStyle
- CWE-707
- CVSS 3.5 Low
Shoplazza LifeStyle Announcement cross site scripting
- Shoplazza LifeStyle
- CWE-707
- CVSS 3.5 Low
Shoplazza LifeStyle Create Product v2_products cross site scripting
- Shoplazza LifeStyle
- CWE-707
- CVSS 3.5 Low
Shoplazza Add Blog Post cross site scripting
- Shoplazza
- CWE-707
- CVSS 3.5 Low
django-openipam exposed_hosts.html cross site scripting
- django-openipam
- CWE-707
- CVSS 3.5 Low
retra-system cross site scripting
- retra-system
- CWE-707
- CVSS 6.3 Medium
luckyshot CRMx index.php commentdelete sql injection
- luckyshot CRMx
- CWE-707
- CVSS 3.5 Low
ctrlo lenio Task task.tt cross site scripting
- ctrlo lenio
- CWE-707
- CVSS 3.5 Low
ctrlo lenio index.tt cross site scripting
- ctrlo lenio
- CWE-707
- CVSS 3.5 Low
ctrlo lenio contractor.tt cross site scripting
- ctrlo lenio
- CWE-707
- CVSS 3.5 Low
ctrlo lenio Notice main.tt cross site scripting
- ctrlo lenio
- CWE-707
- CVSS 3.5 Low
ctrlo lenio Ticket Lenio.pm cross site scripting
- ctrlo lenio
- CWE-707
- CVSS 3.5 Low
WP-Ban ban-options.php toggle_checkbox cross site scripting
- WP-Ban
- CWE-707
- CVSS 3.5 Low
as include.cdn.php getFullURL cross site scripting
- as
- CWE-707
- CVSS 3.5 Low
mschaef toto Email Parameter cross site scripting
- mschaef toto
- CWE-707
- CVSS 3.5 Low
mschaef toto Todo List cross site scripting
- mschaef toto
- CWE-707
- CVSS 4.3 Medium
Opencaching Deutschland oc-server3 Login Page login.tpl cross site scripting
- Opencaching Deutschland oc-server3
- CWE-707