13422 matches found
CVE-2023-4864 SourceCodester Take-Note App index.php cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester Take-Note App 1.0. This affects an unknown part of the file index.php. The manipulation of the argument noteContent with the input alert'xss' leads to cross site scripting. It is possible to initiate the attack...
SourceCodester Take-Note App Cross-Site Scripting Vulnerability
Take-Note App is a note-taking application by the individual developer Remy Andrade. A cross-site scripting vulnerability exists in SourceCodester Take-Note App, which originates from a cross-site scripting attack via index.php...
PT-2023-30865
Name of the Vulnerable Software and Affected Versions SourceCodester Take-Note App version 1.0 Description A problematic vulnerability was found in the SourceCodester Take-Note App, affecting an unknown part of the file index.php. The manipulation of the noteContent argument with the input...
CVE-2023-4864: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in SourceCodester Take-Note App 1.0. This affects an unknown part of the file index.php. The manipulation of the argument noteContent with the input leads to cross site scripting. It is possible to initiate the attack remotely. The...
CVE-2021-36646
A Cross Site Scrtpting XSS vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page...
CVE-2021-36646
A Cross Site Scrtpting XSS vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page...
CVE-2021-36646: Improper Neutralization of Input During Web Page Generation
A Cross Site Scrtpting XSS vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page...
CVE-2023-41601: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in install/index.php of CSZ CMS v1.3.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Database Username or Database Host parameters...
CVE-2021-36646
CVE-2021-36646 – KodExplorer 4.45 : Several connected sources confirm a cross-site scripting (XSS) issue. The nuclei template specifies a reflected XSS in the file view functionality, specifically in app/template/api/view.html where the path parameter is echoed unsafely, enabling attacker-supplie...
CVE-2023-41601
Multiple cross-site scripting XSS vulnerabilities in install/index.php of CSZ CMS v1.3.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Database Username or Database Host parameters...
CVE-2023-4749
CVE-2023-4749 affects SourceCodester Inventory Management System 1.0 (index.php). The vulnerability arises from manipulating the optional page argument to the file index.php, enabling file inclusion and remote access. Multiple sources corroborate a critical severity, with CVSS-derived scores indi...
CVE-2023-4749: External Control of File Name or Path
A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to file inclusion. It is possible to launch the attack remotely. The exploit has been...
CVE-2023-41364
In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection...
CVE-2023-41364
In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection...
Sql injection
In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection...
CVE-2023-41364
CVE-2023-41364 affects tine (team collaboration software) prior to version 2023.01.14.325. The vulnerability is an SQL Injection in the sort parameter of the /index.php endpoint, caused by unsafely handling input in that parameter. Impact is described by sources as critical (CVSS v3.1: high confi...
CVE-2023-41364
In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection...
CVE-2023-41364: Improper Neutralization of Special Elements used in an SQL Command
In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection...
HS-booking CMS 2.79 SQL Injection
==================================================================================================================================== | Title : HS-booking CMS v2.79 SQl injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozila Firefox 68.0 32-bit |...