Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Stored Cross-Site Scripting vulnerability.
The 'Email' parameter of the process_login.php resource does not validate the characters received and they are sent unfiltered to the database.
The 'Password' parameter of the process_login.php resource does not validate the characters received and they are sent unfiltered to the database.
The 'age' parameter of the process_registration.php resource does not validate the characters received and they are sent unfiltered to the database.
The 'name' parameter of the process_registration.php resource does not validate the characters received and they are sent unfiltered to the database.
The 'phone' parameter of the process_registration.php resource does not validate the characters received and they are sent unfiltered to the database.
The 'search' parameter of the process_search.php resource does not validate the characters received and they are sent unfiltered to the database.
TorchServe is a tool for serving and scaling PyTorch models in production. TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken advantage of to compromise the integrity of the system and sensitive data. This issue is present in versions 0.1.0 to 0.8.1. A user is able to load the model of their choice from any URL that they would like to use. The user of TorchServe is responsible…
ShokoServer is a media server which specializes in organizing anime. In affected versions the `/api/Image/WithPath` endpoint is accessible without authentication and is supposed to return default server images. The endpoint accepts the parameter `serverImagePath`, which is not sanitized in any way before being passed to `System.IO.File.OpenRead`, which results in an arbitrary file read. This issue may lead to an arbitrary file read which is exacerbated in the windows installer which installs the…
The 'bookisbn' parameter of the cart.php resource does not validate the characters received and they are sent unfiltered to the database.