CVE-2024-2393: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file adduser.php. The manipulation of the argument city leads to sql injection. The attack can be launched remotely. The...

Piyanas 0.1 Cross Site Request Forgery

==================================================================================================================================== | Title : Piyanas v0.1 User Login Page CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 69.032-bit | ...

NukeViet Cross-Site Request Forgery (CSRF)

modules\users\admin\adduser.php in NukeViet 4.4 allows CSRF to add a user account via the admin/index.php?nv=users&op=useradd URI...

GHSA-C2PX-JCGW-9X57 NukeViet Cross-Site Request Forgery (CSRF)

modules\users\admin\adduser.php in NukeViet 4.4 allows CSRF to add a user account via the admin/index.php?nv=users&op=useradd URI...

CVE-2021-40261

Multiple Cross Site Scripting XSS vulnerabilities exist in SourceCodester CASAP Automated Enrollment System 1.0 via the 1 userusername and 2 category parameters in saveclass.php, the 3 firstname, 4 class, and 5 status parameters in studenttable.php, the 6 category and 7 classname parameters in...

CVE-2021-40261: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities exist in SourceCodester CASAP Automated Enrollment System 1.0 via the 1 userusername and 2 category parameters in saveclass.php, the 3 firstname, 4 class, and 5 status parameters in studenttable.php, the 6 category and 7 classname parameters in...

A-0day-Per-Day-Keeps-The-Cope-Away

A-0day-Per-Day-Keeps-The-Cope-Away Status Start date:...

Cross site request forgery (csrf)

modules\users\admin\adduser.php in NukeViet 4.4 allows CSRF to add a user account via the admin/index.php?nv=users&op=useradd URI...

CVE-2020-13156: Cross-Site Request Forgery (CSRF)

modules\users\admin\adduser.php in NukeViet 4.4 allows CSRF to add a user account via the admin/index.php?nv=users&op=useradd URI...

Cross site request forgery (csrf)

adduser in AbiSoft Ticketly 1.0 allows remote attackers to create administrator accounts via an action/adduser.php POST request...

CVE-2018-18922: Direct Request

adduser in AbiSoft Ticketly 1.0 allows remote attackers to create administrator accounts via an action/adduser.php POST request...

eurosportscoreboard.com XSS vulnerability

Vulnerable URL: https://www.eurosportscoreboard.com/adduser.php Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 09:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 467795 Google Pagerank| 4 VIP website...

wdlinux virtual host Management System File No Access authentication to establish a direct database user-vulnerability warning-the black bar safety net

Brief description: wdcpv2. 5. 1 0 file non-access authentication to establish a direct database account Detailed description: wdcpv2. 5. 1 0 file non-access authentication mysql/adduser. php to establish a direct account truncation of the modified data package to mount the default database to...

wdlinux虚拟主机管理系统文件无访问验证直接建立数据库用户

简要描述： wdcpv2.5.10 文件无访问验证直接建立数据库账户 详细说明： wdcpv2.5.10 文件无访问验证mysql/adduser.php直接建立账户 截断修改数据包 挂载默认数据库 获得后台账户密码 漏洞证明： http://www.pclow.com:8080/mysql/adduser.php...

W-Agora 4.0 - add_user.php bn_dir_default Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...

CVE-2010-5024: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in manage/adduser.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the userid parameter. NOTE: some of these details are obtained from third party information...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in adduser.php in Employee Timeclock Software 0.99 allows remote attackers to hijack the authentication of an administrator for requests that create new administrative users. NOTE: some of these details are obtained from third party information...

CVE-2010-0707

CVE-2010-0707: CSRF in Employee Timeclock Software 0.99 (add_user.php) allows remote attackers to hijack an administrator’s session and create new administrative users. Root cause is CSRF vulnerability on admin-account creation requests; impact is unauthorized admin account creation as described....

CVE-2010-0707: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in adduser.php in Employee Timeclock Software 0.99 allows remote attackers to hijack the authentication of an administrator for requests that create new administrative users. NOTE: some of these details are obtained from third party information...

CVE-2006-0686

adduser.php in Virtual Hosting Control System VHCS 2.4.7.1 and earlier does not check user privileges when adding a new administrative user, which allows remote attackers to gain unauthorized access...