Advisories · Weakness
CWE-707.
Every Advisory and CVE whose sources give the weakness CWE-707, newest first.
- CVSS 2.4 Low
Student Attendance Management System createClass.php cross site scripting
- Student Attendance Management System
- CWE-707
- CVSS 4.7 Medium
Student Attendance Management System createClass.php sql injection
- Student Attendance Management System
- CWE-707
- CVSS 6.3 Medium
Hostel Searching Project view-property.php sql injection
- Hostel Searching Project
- CWE-707
- CVSS 4.7 Medium
Sports Club Management System make_payments.php sql injection
- Sports Club Management System
- CWE-707
- CVSS 6.3 Medium
Hospital Management Center patient-info.php sql injection
- Hospital Management Center
- CWE-707
- CVSS 6.5 Medium
Simple History Plugin Header neutralization for logs
- Simple History Plugin
- CWE-707
- CVSS 6.3 Medium
MonikaBrzica scm uredi_korisnika.php sql injection
- MonikaBrzica scm
- CWE-707
- CVSS 6.3 Medium
MonikaBrzica scm upis_u_bazu.php sql injection
- MonikaBrzica scm
- CWE-707
- CVSS 2.4 Low
SourceCodester Sanitization Management System Banner Image cross site scripting
- SourceCodester Sanitization Management System
- CWE-707
- CVSS 3.5 Low
Frappe Search navbar_search.html cross site scripting
- Frappe
- CWE-707
- CVSS 3.5 Low
NukeView CMS vulnerable to Cross-site Scripting
- Cross-site scripting (XSS)
- CWE-707
<4.5 · fixed in 4.5
GHSA-x45f-j34v-75xm · CVE-2022-3975 - CVSS 4.6 Medium
Matrix-appservice-irc vulnerable to sql injection via roomIds argument
- SQL injection
- CWE-707
<0.36.0 · fixed in 0.36.0
GHSA-ffwf-47x2-jpr8 · CVE-2022-3971 - CVSS 7.3 High
Pingkon HMS-PHP Data Pump Metadata admin.php sql injection
- Pingkon HMS-PHP
- CWE-707
- CVSS 7.3 High
Pingkon HMS-PHP adminlogin.php sql injection
- Pingkon HMS-PHP
- CWE-707
- CVSS 3.5 Low
emlog article_save.php cross site scripting
- emlog
- CWE-707
- CVSS 5.3 Medium
Vesta Control Panel sed main.sh argument injection
- Vesta Control Panel
- CWE-707
- CVSS 3.5 Low
gnuboard5 FAQ Key ID faq.php cross site scripting
- gnuboard5
- CWE-707
- CVSS 6.3 Medium
tsruban HHIMS Patient Portrait sql injection
- tsruban HHIMS
- CWE-707
- CVSS 7.3 High
tholum crm42 Login class.user.php sql injection
- tholum crm42
- CWE-707
- CVSS 3.5 Low
sanluan PublicCMS Tab dwz.min.js initLink cross site scripting
- sanluan PublicCMS
- CWE-707
- CVSS 3.5 Low
Sourcecodester Simple Cashiering System User Account cross site scripting
- Sourcecodester Simple Cashiering System
- CWE-707
- CVSS 6.3 Medium
eolinker goku_lite getList sql injection
- eolinker goku_lite
- CWE-707
- CVSS 6.3 Medium
eolinker goku_lite list sql injection
- eolinker goku_lite
- CWE-707
- CVSS 3.5 Low
ForU CMS cms_chip.php cross site scripting
- ForU CMS
- CWE-707
- CVSS 4.3 Medium
SourceCodester Sanitization Management System cross site scripting
- SourceCodester Sanitization Management System
- CWE-707
- CVSS 5.3 Medium
Activity Log Plugin HTTP Header neutralization for logs
- Activity Log Plugin
- CWE-707
- CVSS 7.3 High
Maxon ERP browse_data sql injection
- Maxon ERP
- CWE-707
- CVSS 4.7 Medium
SourceCodester Sanitization Management System sql injection
- SourceCodester Sanitization Management System
- CWE-707
- CVSS 3.5 Low
Tribal Systems Zenario CMS vulnerable to Cross-site Scripting
- Cross-site scripting (XSS)
- CWE-707
<8.5.51340 · fixed in 8.5.51340
GHSA-f92p-f8r2-c87q · CVE-2020-36608 - CVSS 6.3 Medium
Centreon vulnerable to SQL Injection
- SQL injection
- CWE-707
<22.10.0-beta1 · fixed in 22.10.0-beta1
GHSA-j5wx-jvw3-j363 · CVE-2022-3827 - CVSS 2.4 Low
phpipam Import Preview import-load-data.php cross site scripting
- phpipam
- CWE-707
- CVSS 6.3 Medium
Huaxia ERP User Management sql injection
- Huaxia ERP
- CWE-707
- CVSS 3.5 Low
node-red-dashboard vulnerable to Cross-site Scripting
- Cross-site scripting (XSS)
- CWE-707
<3.2.0 · fixed in 3.2.0
GHSA-vrv9-3x3w-ffxw · CVE-2022-3783 - CVSS 4.3 Medium
eolinker apinto-dashboard login cross site scripting
- eolinker apinto-dashboard
- CWE-707
- CVSS 3.5 Low
eolinker apinto-dashboard cross site scripting
- eolinker apinto-dashboard
- CWE-707
- CVSS 5.5 Medium
Tim Campus Confession Wall share.php sql injection
- Tim Campus Confession Wall
- CWE-707
- CVSS 5.0 Medium
SourceCodester Web-Based Student Clearance System edit-admin.php sql injection
- SourceCodester Web-Based Student Clearance System
- CWE-707
- CVSS 6.3 Medium
seccome Ehoney set sql injection
- seccome Ehoney
- CWE-707
- CVSS 6.3 Medium
seccome Ehoney token sql injection
- seccome Ehoney
- CWE-707
- CVSS 6.3 Medium
seccome Ehoney falco sql injection
- seccome Ehoney
- CWE-707
- CVSS 6.3 Medium
seccome Ehoney attack sql injection
- seccome Ehoney
- CWE-707
- CVSS 3.5 Low
Cross-site Scripting in actionpack
- Cross-site scripting (XSS)
- CWE-707
<=7.0.4 · no fixed version yet
GHSA-9chr-4fjh-5rgw · CVE-2022-3704 - CVSS 3.5 Low
SourceCodester Online Medicine Ordering System cross site scripting
- SourceCodester Online Medicine Ordering System
- CWE-707
- CVSS 5.0 Medium
SourceCodester Online Medicine Ordering System sql injection
- SourceCodester Online Medicine Ordering System
- CWE-707
- CVSS 3.5 Low
SourceCodester Sanitization Management System Master.php cross site scripting
- SourceCodester Sanitization Management System
- CWE-707
- CVSS 3.5 Low
SourceCodester Sanitization Management System SystemSettings.php cross site scripting
- SourceCodester Sanitization Management System
- CWE-707
- CVSS 3.5 Low
SourceCodester Simple Cold Storage Management System My Account cross site scripting
- SourceCodester Simple Cold Storage Management System
- CWE-707
- CVSS 6.3 Medium
SourceCodester Canteen Management System edituser.php sql injection
- SourceCodester Canteen Management System
- CWE-707
- CVSS 7.3 High
SourceCodester Canteen Management System login.php sql injection
- SourceCodester Canteen Management System
- CWE-707
- CVSS 2.4 Low
SourceCodester Cashier Queuing System Cashiers Tab cross site scripting
- SourceCodester Cashier Queuing System
- CWE-707
- CVSS 2.4 Low
SourceCodester Cashier Queuing System User Creation cross site scripting
- SourceCodester Cashier Queuing System
- CWE-707
- CVSS 6.3 Medium
SourceCodester Cashier Queuing System Login Page login.php sql injection
- SourceCodester Cashier Queuing System
- CWE-707
- CVSS 2.4 Low
SourceCodester Simple Cold Storage Management System Add New Storage cross site scripting
- SourceCodester Simple Cold Storage Management System
- CWE-707
- CVSS 2.4 Low
SourceCodester Simple Cold Storage Management System Setting cross site scripting
- SourceCodester Simple Cold Storage Management System
- CWE-707
- CVSS 2.4 Low
SourceCodester Simple Cold Storage Management System Create User cross site scripting
- SourceCodester Simple Cold Storage Management System
- CWE-707
- CVSS 2.4 Low
SourceCodester Sanitization Management System Quote Requests Tab cross site scripting
- SourceCodester Sanitization Management System
- CWE-707
- CVSS 2.4 Low
SourceCodester Sanitization Management System User Creation cross site scripting
- SourceCodester Sanitization Management System
- CWE-707
- CVSS 3.5 Low
SourceCodester Sanitization Management System cross site scripting
- SourceCodester Sanitization Management System
- CWE-707
- CVSS 6.3 Medium
SourceCodester Sanitization Management System sql injection
- SourceCodester Sanitization Management System
- CWE-707
- CVSS 3.5 Low
SourceCodester Purchase Order Management System Supplier cross site scripting
- SourceCodester Purchase Order Management System
- CWE-707