CVE-2026-89244 WWBN AVideo Reflected XSS via Gallery Category getBackURL

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in plugin/Gallery/view/Category.php when SubCategorys is enabled. The getBackURL parameter is echoed into an href attribute without HTML encoding, allowing attackers to inje...

CVE-2026-89244: Improper Neutralization of Input During Web Page Generation

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in plugin/Gallery/view/Category.php when SubCategorys is enabled. The getBackURL parameter is echoed into an href attribute without HTML encoding, allowing attackers to inje...

PT-2025-14577

Name of the Vulnerable Software and Affected Versions SourceCodester Online Medicine Ordering System version 1.0 Description A critical issue was found in the system, affecting an unknown part of the file /view category.php. The manipulation of the ID argument leads to SQL injection. It is possib...

PT-2024-25932

Name of the Vulnerable Software and Affected Versions SourceCodester Computer Laboratory Management System version 1.0 Description The issue allows for SQL Injection in the admin/category/view category.php file through the id parameter. Recommendations For SourceCodester Computer Laboratory...

PT-2022-21262

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/admin/categories/view category.php" API endpoint, specifically through the id variable. This allows for potential unauthorized access and manipulati...

PT-2022-21234

Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/ffos/admin/categories/view category.php?id=" API endpoint. The id variable is vulnerable to injection attacks. Recommendations...

PT-2022-19952

Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue concerns SQL Injection via the "/scbs/admin/categories/view category.php?id=" endpoint. This allows for potential manipulation of database queries. No information is provid...

Aholattafun Creative Solutions SQL Injection Vulnerabilities

Exploit for php platform in category web applications ================================================ Exploit Title: Aholattafun Creative Solutions SQL Injection Vulnerabilities Author: Becax Home : CrimeIRCD Vendor :http://www.aholattafun.com/...