CVE-2021-28006

Web Based Quiz System 1.0 is affected by cross-site scripting XSS in admin.php through the options parameter...

CVE-2021-28006

Web Based Quiz System 1.0 is affected by cross-site scripting XSS in admin.php through the options parameter...

CVE-2021-28006

CVE-2021-28006 affects Web Based Quiz System 1.0 with a reflected/stored XSS vulnerability in the admin.php endpoint via the options parameter. The Red Hat, CNVD, NVD, and CVE records in the connected documents corroborate a cross-site scripting flaw in this component, enabling attacker-injected ...

PT-2021-17709

Name of the Vulnerable Software and Affected Versions: Web Based Quiz System version 1.0 Description: The issue is related to cross-site scripting XSS in the admin.php file through the options parameter. This allows for potential malicious script injection. Recommendations: For Web Based Quiz...

CVE-2021-28006: Improper Neutralization of Input During Web Page Generation

Web Based Quiz System 1.0 is affected by cross-site scripting XSS in admin.php through the options parameter...

CVE-2021-27314

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page...

Sql injection

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page...

CVE-2021-27314

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page...

CVE-2021-27314

Summary: CVE-2021-27314 targets Doctor Appointment System 1.0 and is an unauthenticated SQL injection in login, exploited via the username parameter in admin.php. The vulnerability arises from improper input handling in PHP/MySQLi, enabling arbitrary SQL execution with high impact (CVSS v3.1: 9.8...

PT-2021-17390

Name of the Vulnerable Software and Affected Versions doctor appointment system version 1.0 Description The issue allows an unauthenticated attacker to insert malicious SQL queries via the username parameter at the login page. This is due to a SQL injection flaw in the admin.php file of the docto...

CVE-2021-27314: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page...

PT-2021-11646

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 5.0.2.5 Description: A SQL injection issue allows a remote authenticated attacker to execute arbitrary SQL commands via the schedule facility parameter when restrict user facility=on is in global settings. This occur...

Responsive Menu < 4.0.4 - CSRF to Arbitrary File Upload

"Attackers could craft a request and trick an administrator into uploading a zip archive containing malicious PHP files. The attacker could then access those files to achieve remote code execution and further infect the targeted site." function submitRequest var xhr = new XMLHttpRequest;...

PT-2021-10156

Name of the Vulnerable Software and Affected Versions: PHPSHE version 1.7 Description: The issue concerns SQL Injection vulnerabilities in the PHPSHE software. Specifically, the vulnerabilities are found in the phpshe/admin.php file and can be exploited via the ad id, menu id, and cashout id...

CVE-2020-29250

CXUUCMS V3 allows XSS via the first and third input fields to /public/admin.php...

CVE-2020-29250

CXUUCMS V3 allows XSS via the first and third input fields to /public/admin.php...

Design/Logic Flaw

CXUUCMS V3 allows XSS via the first and third input fields to /public/admin.php...

CVE-2020-29250

CXUUCMS V3 allows XSS via the first and third input fields to /public/admin.php...

CVE-2020-29250

CXUUCMS V3 contains a Cross-Site Scripting (XSS) vulnerability that can be triggered via the first and third input fields to /public/admin.php. The issue is documented across multiple connected sources (e.g., Red Hat, CNVD, CVE records) and is described as CXUUCMS V3 allowing XSS through those in...

PT-2020-17124

Name of the Vulnerable Software and Affected Versions CXUUCMS version V3 Description The issue allows for XSS via the first and third input fields to "/public/admin.php". This means an attacker can inject malicious scripts into the website, potentially stealing user data or taking control of the...