Noxen 跨站脚本漏洞

Noxen is an open source content management system from the individual developer Erik C. Forés. Noxen suffers from a cross-site scripting vulnerability that originates from an attacker being able to enter a special string that results in cross-site scripting of the variable createuserusername by a...

CVE-2022-36270: Undefined Security Weakness

Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php...

CVE-2022-32310

An access control issue in Ingredient Stock Management System v1.0 allows attackers to take over user accounts via a crafted POST request to /isms/classes/Users.php...

CVE-2022-32310

An access control issue in Ingredient Stock Management System v1.0 allows attackers to take over user accounts via a crafted POST request to /isms/classes/Users.php...

Design/Logic Flaw

An access control issue in Ingredient Stock Management System v1.0 allows attackers to take over user accounts via a crafted POST request to /isms/classes/Users.php...

CVE-2022-32310: Incorrect Authorization

An access control issue in Ingredient Stock Management System v1.0 allows attackers to take over user accounts via a crafted POST request to /isms/classes/Users.php...

PT-2022-21222 · Unknown · Ingredients Stock Management System

Name of the Vulnerable Software and Affected Versions: Ingredient Stock Management System version 1.0 Description: An access control issue allows attackers to take over user accounts via a crafted POST request to "/isms/classes/Users.php". Recommendations: For Ingredient Stock Management System...

CVE-2022-34134

Jorani v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /application/controllers/Users.php...

Cross site request forgery (csrf)

Benjamin BALET Jorani v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /application/controllers/Users.php...

CVE-2022-34134

Jorani v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /application/controllers/Users.php...

CVE-2022-34134: Cross-Site Request Forgery (CSRF)

Jorani v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /application/controllers/Users.php...

CVE-2022-2019: Improper Authorization

A vulnerability classified as critical was found in SourceCodester Prison Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php?f=save of the component New User Creation. The manipulation leads to improper authorization. The attack can be...

Cross site scripting

Covid-19 Travel Pass Management System v1.0 is vulnerable to Cross Site Scripting XSS via /ctpms/classes/Users.php?f=save, firstname...

CVE-2022-30462

Water-billing-management-system v1.0 is affected by: Cross Site Scripting XSS via /wbms/classes/Users.php?f=save, firstname...

CVE-2022-30460

Simple Social Networking Site v1.0 is vulnerable to Cross Site Scripting XSS via /sns/classes/Users.php?f=save, firstname...

Cross site scripting

Water-billing-management-system v1.0 is affected by: Cross Site Scripting XSS via /wbms/classes/Users.php?f=save, firstname...

CVE-2022-30460

Simple Social Networking Site v1.0 is vulnerable to Cross Site Scripting XSS via /sns/classes/Users.php?f=save, firstname...

CVE-2022-30460: Improper Neutralization of Input During Web Page Generation

Simple Social Networking Site v1.0 is vulnerable to Cross Site Scripting XSS via /sns/classes/Users.php?f=save, firstname...

CVE-2022-30462: Improper Neutralization of Input During Web Page Generation

Water-billing-management-system v1.0 is affected by: Cross Site Scripting XSS via /wbms/classes/Users.php?f=save, firstname...

CVE-2022-30842: Improper Neutralization of Input During Web Page Generation

Covid-19 Travel Pass Management System v1.0 is vulnerable to Cross Site Scripting XSS via /ctpms/classes/Users.php?f=save, firstname...