CVE-2020-29230

CVE-2020-29230 affects EGavilanMedia User Registration and Login System With Admin Panel 1.0. The vulnerability is an cross-site scripting (XSS) flaw in the Admin Panel – Manage User tab, exploited via the Full Name field in user registration. The described impact is that an attacker can inject a...

CVE-2020-29230

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting XSS in the Admin Panel - Manage User tab using the Full Name of the user. This vulnerability can result in the attacker injecting the XSS payload in the User Registration section and each tim...

CVE-2020-29228

CVE-2020-29228 affects EGavilanMedia User Registration and Login System With Admin Panel 1.0. The vulnerability is a SQL injection on the User Login Page, arising from insufficient input validation on login parameters. Multiple connected sources (Red Hat, CNVD, CVE listings) corroborate the same ...

CVE-2020-35241

FlatPress 1.0.3 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie...

CVE-2020-35241

FlatPress 1.0.3 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie...

Cross site scripting

FlatPress 1.0.3 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie...

CVE-2020-35241

FlatPress 1.0.3 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie...

Egavilanmedia User Registration & Login System 跨站脚本漏洞

Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A cross-site scripting vulnerability exists in EGavilanMedia User Registration and Login System With Admin Panel 1.0, which originates on the admin profile page. The...

Egavilanmedia User Registration & Login System 跨站脚本漏洞

Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A cross-site scripting vulnerability exists in EGavilanMedia User Registration and Login System With Admin Panel version 1.0, which can be exploited by an attacker to...

Egavilan Media EGM Address Book SQL Injection Vulnerability

Egavilan Media EGM Address Book is a platform for managing contact information address book organized by Egavilan Media in the United States. A SQL injection vulnerability exists in EGavilan Media EGM Address Book version 1.0, which can be exploited by an attacker to gain access to the admin pane...

PT-2020-17298 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: FlatPress version 1.0.3 Description: The issue allows an attacker to inject a cross-site scripting XSS payload in blog content via the admin panel. When a user visits the affected blog page, the XSS payload is triggered, potentially allowing...

Egavilanmedia User Registration & Login System SQL注入漏洞

Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A SQL injection vulnerability exists in EGavilanMedia User Registration and Login System With Admin Panel version 1.0, which stems from a lack of validation of external...

PHPGurukul Admin Panel Stored Cross Site Scripting (CVE-2020-24723)

A stored cross-site scripting vulnerability exists in PHPGurukul Admin Panel. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

PHPGurukul Admin Panel SQL Injection (CVE-2020-25952)

An SQL Injection vulnerability exists in PHPGurukul Admin Panel. Successful exploitation of this vulnerability could result in the execution of arbitrary SQL statements on the affected system...

CVE-2020-29194

Panasonic Security System WV-S2231L 4.25 allows a denial of service of the admin control panel which will require a physical reset to restore administrative control via Randomnum=99AC8CEC6E845B28&mode=1 in a POST request to the cgi-bin/setfactory URI...

Panasonic Security System Security Vulnerability

The Panasonic WV-S2231L is a webcam from Panasonic Japan. A security vulnerability exists in the Panasonic Security System WV-S2231L version 4.25, which allows denying service to the administrative control panel via Randomnum=99AC8CEC6E845B28&mode=1 in a POST request with a factory URI set by...

CVE-2020-26766

A Cross Site Request Forgery CSRF vulnerability exists in the loginsystem page in PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1...

Cross site request forgery (csrf)

A Cross Site Request Forgery CSRF vulnerability exists in the loginsystem page in PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1...

CVE-2020-26766

A Cross Site Request Forgery CSRF vulnerability exists in the loginsystem page in PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1...

CVE-2020-26766

CVE-2020-26766 affects PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1, involving a Cross Site Request Forgery (CSRF) vulnerability in the loginsystem page. The connected sources consistently describe the issue as CSRF on the loginsystem page, with no further ...