67 matches found
CVE-2021-27124
SQL injection in the expertise parameter in searchresult.php in Doctor Appointment System v1.0 allows an authenticated patient user to dump the database credentials via a SQL injection attack...
Sql injection
SQL injection in the expertise parameter in searchresult.php in Doctor Appointment System v1.0 allows an authenticated patient user to dump the database credentials via a SQL injection attack...
CVE-2021-27124
Doctor Appointment System 1.0 is affected by an SQL injection in the expertise parameter of search_result.php. The vulnerability arises from insufficient input validation, allowing an authenticated patient user to execute arbitrary SQL and dump database credentials, implying potential data leakag...
CVE-2021-27124
SQL injection in the expertise parameter in searchresult.php in Doctor Appointment System v1.0 allows an authenticated patient user to dump the database credentials via a SQL injection attack...
CVE-2021-27124: Improper Neutralization of Special Elements used in an SQL Command
SQL injection in the expertise parameter in searchresult.php in Doctor Appointment System v1.0 allows an authenticated patient user to dump the database credentials via a SQL injection attack...
topole.com.tw XSS vulnerability
Open Bug Bounty ID: OBB-547833 Description| Value ---|--- Affected Website:| topole.com.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
sweet-family.com.tw XSS vulnerability
Open Bug Bounty ID: OBB-546967 Description| Value ---|--- Affected Website:| sweet-family.com.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
countess.com.tw XSS vulnerability
Open Bug Bounty ID: OBB-546820 Description| Value ---|--- Affected Website:| countess.com.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
chinabest.com.tw XSS vulnerability
Open Bug Bounty ID: OBB-545862 Description| Value ---|--- Affected Website:| chinabest.com.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Sql injection
Entrepreneur Dating Script 2.0.1 has SQL Injection via the searchresult.php marital, gender, country, or profileid parameter...
CVE-2017-17648
Entrepreneur Dating Script 2.0.1 has SQL Injection via the searchresult.php marital, gender, country, or profileid parameter...
CVE-2017-17648
Vulnerability detail (CVE-2017-17648): Entrepreneur Dating Script 2.0.1 exposes an SQL Injection flaw in the search_result.php endpoint. The vulnerability is triggered via unsanitized inputs in the parameters marital , gender , country , or profileid , allowing arbitrary SQL commands to be inject...
CVE-2017-17648
Entrepreneur Dating Script 2.0.1 has SQL Injection via the searchresult.php marital, gender, country, or profileid parameter...
CVE-2017-17648: Improper Neutralization of Special Elements used in an SQL Command
Entrepreneur Dating Script 2.0.1 has SQL Injection via the searchresult.php marital, gender, country, or profileid parameter...
mindfiesta.com XSS vulnerability
Vulnerable URL: http://www.mindfiesta.com/searchresult.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 14098235 VIP website status:| No Coordinated Disclosure Timeline:...
fisheries.gov.lk XSS vulnerability
Vulnerable URL: http://www.fisheries.gov.lk/searchresult.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1662065 VIP website status:| No Coordinated Disclosure Timeline:...
beta.veoh.com XSS vulnerability
Vulnerable URL: http://beta.veoh.com/m/searchresult.php?query='"/alert"openbugbounty"...
tgo.or.th XSS vulnerability
Vulnerable URL: http://www.tgo.or.th/2015/thai/searchresult.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1123831 VIP website status:| No Check tgo.or.th SSL connection:| Grad...