Lucene search
+L

34 matches found

Vulnrichment
Vulnrichment
•added 2024/03/16 2:31 p.m.•20 views

CVE-2024-2519 MAGESH-K21 Online-College-Event-Hall-Reservation-System navbar.php cross site scripting

A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been classified as problematic. Affected is an unknown function of the file navbar.php. The manipulation of the argument id leads to cross site scripting. It is possible to launch the attack remotely...

4CVSS6AI score0.00385EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/16 12:00 a.m.•3 views

CVE-2024-2519: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been classified as problematic. Affected is an unknown function of the file navbar.php. The manipulation of the argument id leads to cross site scripting. It is possible to launch the attack remotely...

6.1CVSS4AI score0.00385EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/09 12:00 a.m.•6 views

CVE-2023-27211: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in /admin/navbar.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter...

6.1CVSS6.1AI score0.00434EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/09 12:00 a.m.•5 views

CVE-2023-27206: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in /kruxton/navbar.php of Best POS Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter...

6.1CVSS6.1AI score0.00434EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2023/03/09 12:00 a.m.•49 views

CVE-2023-27211

A cross-site scripting XSS vulnerability in /admin/navbar.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter...

6AI score0.00434EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/02/06 12:00 a.m.•16 views

Online Food Ordering System 跨站脚本漏洞

Online Food Ordering System is an online food ordering system. A cross-site scripting vulnerability exists in Online Food Ordering System, which is caused by the lack of effective filtering and escaping of user-supplied data in the page parameter of navbar.php page, which can be exploited to caus...

6.1CVSS6.2AI score0.00486EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/02/06 12:00 a.m.•45 views

CVE-2023-24194

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in navbar.php...

6.2AI score0.00486EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/06 12:00 a.m.•5 views

CVE-2023-24194: Improper Neutralization of Input During Web Page Generation

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in navbar.php...

6.1CVSS5.6AI score0.00486EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/05/24 5:50 p.m.•36 views

CVE-2021-30081

An issue was discovered in emlog 6.0.0stable. There is a SQL Injection vulnerability that can execute any SQL statement and query server sensitive data via admin/navbar.php?action=addpage...

9.3AI score0.00982EPSS
SaveExploits1References1
Mend
Mend
•added 2021/05/24 5:50 p.m.•5 views

CVE-2021-30081

An issue was discovered in emlog 6.0.0stable. There is a SQL Injection vulnerability that can execute any SQL statement and query server sensitive data via admin/navbar.php?action=addpage...

8.8CVSS0.00982EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/24 12:00 a.m.•9 views

CVE-2021-30081: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in emlog 6.0.0stable. There is a SQL Injection vulnerability that can execute any SQL statement and query server sensitive data via admin/navbar.php?action=addpage...

8.8CVSS5.9AI score0.00982EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/05/24 12:00 a.m.•8 views

PT-2021-18596

Name of the Vulnerable Software and Affected Versions emlog version 6.0.0stable Description The issue is related to a SQL Injection vulnerability. This vulnerability can execute any SQL statement and query server sensitive data via the "admin/navbar.php?action=add page" endpoint. The action...

8.8CVSS0.00982EPSS
SaveExploits1References4
NVD
NVD
•added 2009/12/10 11:30 p.m.•30 views

CVE-2009-4238

Multiple SQL injection vulnerabilities in TestLink before 1.8.5 allow remote authenticated users to execute arbitrary SQL commands via 1 the Test Case ID field to lib/general/navBar.php or 2 the logLevel parameter to lib/events/eventviewer.php...

6.5CVSS8AI score0.01082EPSS
SaveExploits7References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/12/10 12:00 a.m.•6 views

CVE-2009-4238: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in TestLink before 1.8.5 allow remote authenticated users to execute arbitrary SQL commands via 1 the Test Case ID field to lib/general/navBar.php or 2 the logLevel parameter to lib/events/eventviewer.php...

6.5CVSS6.4AI score0.01082EPSS
SaveExploits7References2
Rows per page
Query Builder