659 matches found
CVE-2022-21643: Improper Neutralization of Special Elements used in an SQL Command
USOC is an open source CMS with a focus on simplicity. In affected versions USOC allows for SQL injection via register.php. In particular usernames, email addresses, and passwords provided by the user were not sanitized and were used directly to construct a sql statement. Users are advised to...
CVE-2020-20797
FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php...
CVE-2020-20797
FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php...
CVE-2020-20797: Improper Neutralization of Special Elements used in an SQL Command
FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php...
PT-2021-10544
Name of the Vulnerable Software and Affected Versions: FlameCMS version 3.3.5 Description: The issue is a time-based blind SQL injection vulnerability. It is located in the /account/register.php endpoint. Recommendations: For FlameCMS version 3.3.5, consider disabling the /account/register.php...
Cross-site Scripting (XSS) - Reflected in kasuganosoras/pigeon
✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...
PT-2021-21247
Name of the Vulnerable Software and Affected Versions Care2x Hospital Information Management version 2.7 Alpha Description A stored cross-site scripting XSS issue has been identified. The vulnerability is found in POST requests to the "/modules/registration admission/patient register.php" page,...
CVE-2021-31329
Cross Site Scripting XSS in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php...
Cross site scripting
Cross Site Scripting XSS in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php...
CVE-2021-31329
Cross Site Scripting XSS in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php...
CVE-2021-31329: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php...
PT-2021-19244
Name of the Vulnerable Software and Affected Versions Remote Clinic version 2.0 Description The issue concerns a Cross Site Scripting XSS problem. It affects the "Chat" and "Personal Address" fields on the staff/register.php page. Recommendations For Remote Clinic version 2.0, consider restrictin...
RemoteClinic 2 Cross Site Scripting
Exploit Title: Cross Site Scripting XSS RemoteClinic on register.php Author: nu11secur1ty Debug: g3ck0dr1v3r Date: 04.21.2021 Vendor: RemoteClinic Link: https://github.com/remoteclinic/RemoteClinic CVE: CVE-2021-30044 + Exploit Source:...
Cross site scripting
Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...
Cross site scripting
Cross Site Scripting XSS in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Contact" field on clinics/register.php...
CVE-2021-30044
CVE-2021-30044 is a Cross-Site Scripting (XSS) vulnerability in Remote Clinic v2.0 exploitable via the First Name or Last Name field on staff/register.php. The connected sources confirm the affected product and entry details, including public exploit references and multiple security databases des...
CVE-2021-30044
Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...
CVE-2021-30042
Cross Site Scripting XSS in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Contact" field on clinics/register.php...
CVE-2021-30042
CVE-2021-30042 describes a stored XSS vulnerability in Remote Clinic v2.0 exploitable via the Clinic Name/Address/City/Contact fields on clinics/register.php. Multiple sources (NVD, Red Hat, CNVD, CVE List) confirm the issue and its impact to inject scripts. Public details do not provide a patche...