30 matches found
CVE-2022-3472 SourceCodester Human Resource Management System city.php sql injection
A vulnerability was found in SourceCodester Human Resource Management System. It has been rated as critical. Affected by this issue is some unknown functionality of the file city.php. The manipulation of the argument cityedit leads to sql injection. The attack may be launched remotely. The exploi...
allconferencealerts.org XSS vulnerability
Open Bug Bounty ID: OBB-666397 Description| Value ---|--- Affected Website:| allconferencealerts.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2017-17640
Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country parameter...
CVE-2017-17640
Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country parameter...
CVE-2017-17640
The CVE-2017-17640 entry concerns Advanced World Database 2.0.5, which is vulnerable to SQL Injection via the city.php and state.php parameters (country and state inputs). Multiple connected sources (CNVD-2017-37430, NVD entries) describe a remote injection path that can affect database queries t...
PT-2017-14936
Name of the Vulnerable Software and Affected Versions Advanced World Database version 2.0.5 Description The issue concerns SQL Injection via specific parameters in certain PHP files. The country or state parameter in the "city.php" file and the country parameter in the "state.php" file are...
CVE-2017-17640: Improper Neutralization of Special Elements used in an SQL Command
Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country parameter...
parti-pna.com XSS vulnerability
Open Bug Bounty ID: OBB-378656 Description| Value ---|--- Affected Website:| parti-pna.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
allacrosstexas.com XSS vulnerability
Open Bug Bounty ID: OBB-378552 Description| Value ---|--- Affected Website:| allacrosstexas.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...