5001 matches found
CVE-2022-25408
Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the dpassword parameter at /admin-panel1.php...
CVE-2022-25409
Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the demail parameter at /admin-panel1.php...
CVE-2022-25409
Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the demail parameter at /admin-panel1.php...
CVE-2022-25409
Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the demail parameter at /admin-panel1.php...
CVE-2022-25408
Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the dpassword parameter at /admin-panel1.php...
Cross site scripting
Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the dpassword parameter at /admin-panel1.php...
CVE-2022-25407
Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Doctor parameter at /admin-panel1.php...
PHPGurukul Hospital Management System 跨站脚本漏洞
PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. PHPGurukul Hospital Management System suffers from a cross-site scripting vulnerability that stems from the discovery that Hospital Management System v1.0 contains a stored cross-site scripting vulnerabilit...
HealthNode Hospital Management System跨站脚本漏洞
HealthNode Hospital Management System is a hospital management system. The system includes patient information management, ward management, surgery schedule management and financial management, etc. A cross-site scripting vulnerability exists in Hospital Management System v1.0, which stems from t...
HealthNode Hospital Management System 跨站脚本漏洞
Hospital Management System is a hospital management system. The system includes patient information management, ward management, surgery schedule management and financial management, etc. A cross-site scripting vulnerability exists in Hospital Management System v1.0, which stems from the lack of...
GHSA-79JW-2F46-WV22 Authenticated remote code execution in October CMS
Impact An authenticated user with the permissions to create, modify and delete website pages can exploit this vulnerability to bypass cms.safemode / cms.enableSafeMode in order to execute arbitrary code. - This issue only affects admin panels that rely on safe mode and restricted permissions. - T...
CVE-2022-21705 Authenticated remote code execution in octobercms
Octobercms is a self-hosted CMS platform based on the Laravel PHP Framework. In affected versions user input was not properly sanitized before rendering. An authenticated user with the permissions to create, modify and delete website pages can exploit this vulnerability to bypass cms.safemode /...
CVE-2022-21705 Authenticated remote code execution in octobercms
Octobercms is a self-hosted CMS platform based on the Laravel PHP Framework. In affected versions user input was not properly sanitized before rendering. An authenticated user with the permissions to create, modify and delete website pages can exploit this vulnerability to bypass cms.safemode /...
CVE-2022-21705
October CMS (Laravel-based) is vulnerable to an authenticated remote code execution due to improper sanitization of user input in admin pages, allowing bypass of cms.safe_mode/cms.enableSafeMode and arbitrary code execution. Affected builds were fixed in Build 474 (1.0.474) and 1.1.10; manual rem...
CVE-2021-45007
Plesk 18.0.37 is affected by a Cross Site Request Forgery CSRF vulnerability that allows an attacker to insert data on the user and admin panel. NOTE: the vendor states that this is only a site-specific problem on websites of one or more Plesk users...
CVE-2021-45007
Plesk 18.0.37 is affected by a Cross Site Request Forgery CSRF vulnerability that allows an attacker to insert data on the user and admin panel. NOTE: the vendor states that this is only a site-specific problem on websites of one or more Plesk users...
CVE-2021-45007
Plesk 18.0.37 is affected by a Cross Site Request Forgery CSRF vulnerability that allows an attacker to insert data on the user and admin panel. NOTE: the vendor states that this is only a site-specific problem on websites of one or more Plesk users...
Cross site request forgery (csrf)
DISPUTED Plesk 18.0.37 is affected by a Cross Site Request Forgery CSRF vulnerability that allows an attacker to insert data on the user and admin panel. NOTE: the vendor states that this is only a site-specific problem on websites of one or more Plesk users...
CVE-2021-45007
Summary: CVE-2021-45007 affects Plesk 18.0.37 and is a Cross-Site Request Forgery (CSRF) vulnerability caused by lack of CSRF token validation, enabling an attacker to insert data into the user and admin panels. Affected component/scope: Plesk 18.0.37; site-specific issues noted across Plesk user...