CVE-2021-40577

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 in the Add-Users page via the Name parameter...

Cross site scripting

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 in the Add-Users page via the Name parameter...

CVE-2021-40577

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 in the Add-Users page via the Name parameter...

CVE-2021-40577

CVE-2021-40577 is a stored XSS vulnerability in the Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, affecting the Add-Users page via the Name parameter. The issue arises from storing unsanitized input that is later reflected, enabling a persistent script...

CVE-2021-40577

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 in the Add-Users page via the Name parameter...

CVE-2021-40577: Improper Neutralization of Input During Web Page Generation

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 in the Add-Users page via the Name parameter...

PT-2021-5955

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code version 1.0 Description A Stored Cross Site Scripting XSS issue exists in the Add-Users page via the Name parameter, allowing a remote attacker to perform...

CVE-2021-22449

There is a logic vulnerability in Elf-G10HN 1.0.0.608. An unauthenticated attacker could perform specific operations to exploit this vulnerability. Due to insufficient security design, successful exploit could allow an attacker to add users to be friends without prompting in the target device...

PT-2021-10616

Name of the Vulnerable Software and Affected Versions: Wage-CMS version 1.5.x-dev Description: A cross-site request forgery CSRF issue allows attackers to arbitrarily add users. This can be exploited by tricking a user into performing unintended actions on the web application. Recommendations: Fo...

CVE-2020-21358: Cross-Site Request Forgery (CSRF)

A cross site request forgery CSRF in Wage-CMS 1.5.x-dev allows attackers to arbitrarily add users...

CVE-2021-31762: Cross-Site Request Forgery (CSRF)

Webmin 1.973 is affected by Cross Site Request Forgery CSRF to create a privileged user through Webmin's add users feature, and then get a reverse shell through Webmin's running process feature...

CVE-2021-23276: Improper Neutralization of Special Elements used in an SQL Command

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to authenticated SQL injection. A malicious user can send a specially crafted packet to exploit the vulnerability. Successful exploitation of this vulnerability can allow attackers to add users in the data base...

PT-2021-15429

Name of the Vulnerable Software and Affected Versions Eaton Intelligent Power Manager IPM versions prior to 1.69 Description The issue allows for authenticated SQL injection, where a malicious user can send a specially crafted packet to exploit it. Successful exploitation can enable attackers to...

CVE-2021-23276

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to authenticated SQL injection. A malicious user can send a specially crafted packet to exploit the vulnerability. Successful exploitation of this vulnerability can allow attackers to add users in the data base...

Cross site request forgery (csrf)

SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery CSRF vulnerability, which allows attackers to add new users...

CVE-2020-23837: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote attackers to add admin or other users after an authenticated admin visits a third-party site or clicks on a URL...

PT-2020-15595

Name of the Vulnerable Software and Affected Versions GetSimple CMS Multi User plugin version 1.8.2 Description A Cross-Site Request Forgery CSRF issue allows remote attackers to add admin or other users after an authenticated admin visits a third-party site or clicks on a URL. This occurs becaus...

PT-2020-11986

Name of the Vulnerable Software and Affected Versions vtecrm vtenext version 19 CE Description A CSRF issue allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, adding users, and deleting accounts. Recommendations For vtecrm vtenext version 19 CE,...

CVE-2020-10229: Cross-Site Request Forgery (CSRF)

A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, adding users, and deleting accounts...

CVE-2020-25251: Improper Authentication

An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. Client-side authentication is used for critical functions such as adding users or retrieving sensitive information...