Lucene search
K

568 matches found

CNVD
CNVD
added 2024/03/12 12:0 a.m.15 views

Customer Support System Cross-Site Scripting Vulnerability

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a cross-site scripting vulnerability that stems fro...

5.4CVSS6.2AI score0.0045EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/03/09 12:0 a.m.5 views

Netentsec NS-ASG Application Security Gateway SQL Injection Vulnerability

Netentsec NS-ASG Application Security Gateway is an application security gateway from China Netentsec. A SQL injection vulnerability exists in Netentsec NS-ASG Application Security Gateway version 6.3. The vulnerability originates from some unknown functions in /protocol/index.php, which can lead...

9.8CVSS8AI score0.17622EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2024/03/07 1:15 a.m.1 views

CVE-2023-51281

Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters...

5.4CVSS5.8AI score0.00478EPSS
Exploits1References3
OSV
OSV
added 2024/03/06 1:15 a.m.4 views

CVE-2023-49977

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at /customersupport/index.php?page=newcustomer...

5.4CVSS5.9AI score0.0045EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2024/03/06 1:15 a.m.2 views

CVE-2023-49977

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at /customersupport/index.php?page=newcustomer...

5.4CVSS6AI score0.0045EPSS
Exploits1References3
NVD
NVD
added 2024/03/06 1:15 a.m.12 views

CVE-2023-49977

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at /customersupport/index.php?page=newcustomer...

5.4CVSS5.6AI score0.0045EPSS
Exploits1References2
Prion
Prion
added 2024/03/06 1:15 a.m.11 views

Cross site scripting

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at /customersupport/index.php?page=newcustomer...

5.9AI score0.0045EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/03/06 12:0 a.m.3 views

Customer Support System 跨站脚本漏洞

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a cross-site scripting vulnerability that stems fro...

5.4CVSS5.9AI score0.0045EPSS
Exploits1References3
Cvelist
Cvelist
added 2024/03/06 12:0 a.m.13 views

CVE-2023-49977

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at /customersupport/index.php?page=newcustomer...

5.7AI score0.0045EPSS
Exploits1References2
0day.today
0day.today
added 2024/03/04 12:0 a.m.334 views

Petrol Pump Management Software v1.0 - (Address) Stored Cross Site Scripting Vulnerability

Exploit Title: Petrol Pump Management Software v1.0 - 'Address' Stored Cross Site Scripting Exploit Author: Shubham Pandey Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/17180/petrol-pump-management-software-free-download.html Version: 1.0 Tested...

6.1CVSS6.3AI score0.01307EPSS
Exploits4
NVD
NVD
added 2024/03/01 10:15 p.m.10 views

CVE-2024-27743

Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the Address parameter in the addinvoices.php component...

6.1CVSS6.8AI score0.01307EPSS
Exploits4References1
OSV
OSV
added 2024/03/01 10:15 p.m.2 views

CVE-2024-27743

Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the Address parameter in the addinvoices.php component...

6.1CVSS6.1AI score0.01307EPSS
Exploits4References1
Prion
Prion
added 2024/03/01 10:15 p.m.19 views

Cross site scripting

Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the Address parameter in the addinvoices.php component...

7.6AI score0.01307EPSS
Exploits4References1
Prion
Prion
added 2024/03/01 10:15 p.m.18 views

Sql injection

SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email address parameter in the index.php component...

9.3AI score0.12946EPSS
Exploits4References1
Vulnrichment
Vulnrichment
added 2024/03/01 12:0 a.m.11 views

CVE-2024-27746

SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email address parameter in the index.php component...

8.9AI score0.12946EPSS
Exploits4References1
Cvelist
Cvelist
added 2024/03/01 12:0 a.m.20 views

CVE-2024-27746

SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email address parameter in the index.php component...

8.5AI score0.12946EPSS
Exploits4References1
Vulnrichment
Vulnrichment
added 2024/03/01 12:0 a.m.15 views

CVE-2024-27743

Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the Address parameter in the addinvoices.php component...

7.1AI score0.01307EPSS
Exploits4References1
Vulnrichment
Vulnrichment
added 2024/02/29 12:0 a.m.11 views

CVE-2023-51800

Cross Site Scripting XSS vulnerability in School Fees Management System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the mainsettings component in the phone, address, bank, accname, accnumber parameters, newclass and cname parameter, addnewparent function in t...

6.5AI score0.00628EPSS
Exploits1References1
OSV
OSV
added 2024/02/28 10:15 p.m.4 views

CVE-2024-1972

A vulnerability was found in SourceCodester Online Job Portal 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /Employer/EditProfile.php. The manipulation of the argument Address leads to cross site scripting. The attack may be launched remotely...

5.4CVSS3.6AI score
Exploits0References3
CNNVD
CNNVD
added 2024/02/28 12:0 a.m.4 views

Online Job Portal Security Vulnerability

Online Job Portal is an online job portal for janobe individual developers. A security vulnerability exists in SourceCodester Online Job Portal version 1.0, which stems from a cross-site scripting XSS vulnerability in the parameter Address in the file /EEmployer/EditProfile.php...

5.4CVSS5.9AI score0.00484EPSS
Exploits1References4
Rows per page
Query Builder