CVE-2021-27519

A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter...

CVE-2021-27519

A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter...

CVE-2021-27520

A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter...

PT-2021-17491

Name of the Vulnerable Software and Affected Versions FUDForum version 3.1.0 Description A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the "index.php" endpoint in the srch parameter. Recommendations For FUDForum version 3.1.0, consider disabling the srch...

PT-2021-17492

Name of the Vulnerable Software and Affected Versions FUDForum version 3.1.0 Description A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the "index.php" endpoint in the author parameter. Recommendations For FUDForum version 3.1.0, as a temporary workaround,...

CVE-2021-27520: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter...

CVE-2021-27519: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter...

CVE-2020-24877: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in zzzphp v1.8.0 through /form/index.php?module=getjson may lead to a possible access restriction bypass...

PT-2021-11077

Name of the Vulnerable Software and Affected Versions: zzzphp version 1.8.0 Description: A SQL injection issue may lead to a possible access restriction bypass. The /form/index.php?module=getjson endpoint is affected. Recommendations: For zzzphp version 1.8.0, consider restricting access to the...

Seat-Reservation-System SQL Injection Vulnerability

Seat-Reservation-System is a seat reservation system. A sql injection vulnerability exists in Seat-Reservation-System 1.0. The vulnerability is caused due to the id and file parameters in the index.php file not being input/output filtered for special characters. An attacker can exploit this...

Sql injection

Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information...

CVE-2020-36002

Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information...

CVE-2020-36002

CVE-2020-36002 affects Seat-Reservation-System 1.0. A SQL injection in index.php parameter id (and related file param per PT-2021-11898) can lead to disclosure of sensitive database information. No official patch/version is detailed in the provided sources; mitigations include parameter access re...

PT-2021-11898 · Unknown · Seat Reservation System

Name of the Vulnerable Software and Affected Versions: Seat-Reservation-System version 1.0 Description: The issue is related to a SQL injection vulnerability in the index.php file, specifically affecting the id and file parameters. This allows attackers to obtain sensitive database information...

CVE-2020-36002: Improper Neutralization of Special Elements used in an SQL Command

Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information...

CVE-2021-3293

emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file...

CVE-2021-3293

Affected software: emlog v5.3.1. Vulnerability: full path disclosure in t/index.php, enabling an attacker to view the path to the webroot/file. Root cause/impact: information disclosure of the server’s filesystem structure; no explicit exploit details provided in the documents. Exploitation statu...

CVE-2021-3293

emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file...

CVE-2021-3293

emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file...

Sql injection

College Management System Php 1.0 suffers from SQL injection vulnerabilities in the index.php page from POST parameters 'unametxt' and 'pwdtxt', which are not filtered before passing a SQL query...