PT-2024-20191 · Sourcecodester · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /Admin/add-admin.php, where the manipulation of the avatar argument leads to unrestricted upload. This issue ca...

CVE-2024-1928: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-admin.php of the component Edit User Profile Page. The manipulation of the argument Fullname lea...

CVE-2024-1018: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in PbootCMS 3.2.5-20230421. Affected is an unknown function of the file /admin.php?p=/Area/indextab=t2. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

Cross site scripting

XunRuiCMS v4.5.5 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin.php...

CVE-2023-49490

XunRuiCMS v4.5.5 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin.php...

PT-2023-31244 · Xunruicms · Xunruicms

Name of the Vulnerable Software and Affected Versions: XunRuiCMS version 4.5.5 Description: A reflective cross-site scripting XSS issue was found in XunRuiCMS via the component /admin.php. This allows for potential XSS attacks. Recommendations: For XunRuiCMS version 4.5.5, as a temporary...

CVE-2023-49490

XunRuiCMS v4.5.5 contains a reflective cross-site scripting (XSS) vulnerability exploitable via the component /admin.php. The issue is documented across multiple sources (NVD, Red Hat, CNNVD, CVE listing) and is associated with XunRuiCMS 4.5.5. The root cause is reflective XSS in /admin.php, allo...

CVE-2023-49490: Improper Neutralization of Input During Web Page Generation

XunRuiCMS v4.5.5 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin.php...

CVE-2023-48940

A stored cross-site scripting XSS vulnerability in /admin.php of DaiCuo v2.5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

Cross site scripting

A stored cross-site scripting XSS vulnerability in /admin.php of DaiCuo v2.5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-48940: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in /admin.php of DaiCuo v2.5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-46958

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file...

Design/Logic Flaw

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file...

CVE-2023-46958

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file...

CVE-2023-46958: Improper Control of Generation of Code

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file...

CVE-2023-46958

An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file...

PT-2023-30271

Name of the Vulnerable Software and Affected Versions lmxcms version 1.41 Description An issue in lmxcms allows a remote attacker to execute arbitrary code via a crafted script to the "admin.php" file. Recommendations For lmxcms version 1.41, consider disabling access to the "admin.php" file as a...

CVE-2023-45201

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the admin.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL...

Open redirect

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the admin.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL...

PT-2023-29454 · Unknown · Online Examination System

Name of the Vulnerable Software and Affected Versions: Online Examination System version 1.0 Description: The issue allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL. The 'q' parameter of the "admin.php" resource is vulnerable to Open Redirect attacks...