PT-2023-13787

Name of the Vulnerable Software and Affected Versions Intern Record System version 1.0 Description The issue is a Cross Site Scripting XSS vulnerability that allows attackers to execute arbitrary code. This is achieved through the /intern/controller.php endpoint, specifically by manipulating the...

CVE-2022-40348: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, allows attackers to execute arbitrary code...

CVE-2022-40347: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information...

PT-2023-13786

Name of the Vulnerable Software and Affected Versions Intern Record System version 1.0 Description The issue allows attackers to execute arbitrary code and gain sensitive information through a SQL Injection vulnerability in the /intern/controller.php file, specifically in the phone, email,...