Lucene search
+L

79 matches found

CNVD
CNVD
added 2023/11/16 12:0 a.m.8 views

Teacher Subject Allocation Management System profile.php file cross-site scripting vulnerability

Teacher Subject Allocation Management System a teacher subject allocation management system. Teacher Subject Allocation Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the adminname and email...

4.8CVSS6.3AI score0.00423EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/11/14 10:15 p.m.4 views

CVE-2023-46026

Cross Site Scripting XSS vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters...

4.8CVSS6AI score0.00423EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/14 10:15 p.m.8 views

CVE-2023-46026

Cross Site Scripting XSS vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters...

4.8CVSS6AI score0.00423EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/11/14 12:0 a.m.6 views

phpgurukul Teacher Subject Allocation Management System 安全漏洞

Teacher Subject Allocation Management System a teacher subject allocation management system. Teacher Subject Allocation Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the adminname and email...

4.8CVSS6.2AI score0.00423EPSS
SaveExploits1References2
OSV
OSV
added 2023/07/28 2:15 p.m.7 views

CVE-2023-31934

Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the adminname parameter of admin-profile.php...

4.8CVSS5.8AI score0.00465EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/07/28 12:0 a.m.7 views

Rail Pass Management System 跨站脚本漏洞

Rail Pass Management System is a pass management system. A cross-site scripting vulnerability exists in Rail Pass Management System version v.1.0 that could allow a remote attacker to obtain sensitive information via the adminname parameter of admin-profile.php...

4.8CVSS5AI score0.00465EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/07/28 12:0 a.m.9 views

PT-2023-23532 · Unknown · Rail Pass Management System

Name of the Vulnerable Software and Affected Versions: Rail Pass Management System version 1.0 Description: A Cross Site Scripting issue allows a remote attacker to obtain sensitive information via the adminname parameter of "admin-profile.php". Recommendations: For Rail Pass Management System...

4.8CVSS4.8AI score0.00465EPSS
SaveExploits1References3
OSV
OSV
added 2023/07/25 8:15 a.m.3 views

CVE-2023-3888

A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. The attack may be...

6.1CVSS3.8AI score0.00608EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/07/25 12:0 a.m.8 views

PT-2023-26659 · Unknown · Campcodes Beauty Salon Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 1.0 Description: A vulnerability was found in the system, affecting some unknown functionality of the file /admin/admin-profile.php. The manipulation of the adminname argument leads to cross si...

6.1CVSS4.3AI score0.00608EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2023/07/25 12:0 a.m.8 views

PT-2023-26579 · Unknown · Campcodes Beauty Salon Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /admin/admin-profile.php. The manipulation of the adminname argument leads to sql injection...

7.5CVSS7AI score0.00591EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2023/07/25 12:0 a.m.5 views

Campcodes Beauty Salon Management System 跨站脚本漏洞

Campcodes Beauty Salon Management System is a beauty salon management system from Campcodes, Inc. A cross-site scripting vulnerability exists in Campcodes Beauty Salon Management System version 1.0, which stems from unknown processing in /admin/admin-profile.php, leading to cross-site scripting v...

6.1CVSS4.6AI score0.00608EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/03/14 12:0 a.m.5 views

PT-2023-16954 · Sourcecodester · Sourcecodester Online Student Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student Management System version 1.0 Description: A vulnerability has been found in the SourceCodester Online Student Management System. The issue is related to an unknown function of the file profile.php, where the...

6.1CVSS6.9AI score0.00562EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/03/14 12:0 a.m.8 views

Student Management System 跨站脚本漏洞

Student Management System is a simple web-based student management software from the individual developer Sk.Amir Hamza, Bangladesh. A cross-site scripting vulnerability exists in SourceCodester Online Student Management System version 1.0, which stems from incorrect manipulation of the parameter...

6.1CVSS4.1AI score0.00562EPSS
SaveExploits1References4
CNVD
CNVD
added 2022/05/07 12:0 a.m.42 views

Hospital Management System SQL Injection Vulnerability (CNVD-2022-83601)

Hospital Management System is a hospital management system. A SQL injection vulnerability exists in Hospital Management System v1.0, which includes modules for patient information management, appointment services, and financial management. The vulnerability is related to the lack of validation of...

7.5CVSS1.6AI score0.02909EPSS
SaveExploits1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/05/03 9:15 p.m.2 views

CVE-2022-27413

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in admin.php...

9.8CVSS5.9AI score0.02909EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/05/03 8:24 p.m.31 views

CVE-2022-27413

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in admin.php...

10AI score0.02909EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/05/03 12:0 a.m.5 views

Hospital Management System SQL注入漏洞

Hospital Management System is a hospital management system. A SQL injection vulnerability exists in Hospital Management System v1.0, which includes modules for patient information management, appointment services, and financial management. The vulnerability is related to the lack of validation of...

9.8CVSS8.5AI score0.02909EPSS
SaveExploits1References2
Prion
Prion
added 2009/08/17 4:30 p.m.16 views

Sql injection

Multiple SQL injection vulnerabilities in Mobilelib GOLD 3 allow remote attackers to execute arbitrary SQL commands via the 1 adminName parameter to cp/auth.php, 2 cid parameter to artcat.php, and 3 catid parameter to show.php...

7.5CVSS9.3AI score0.00907EPSS
SaveExploits2References2Affected Software1
NVD
NVD
added 2007/12/20 8:46 p.m.20 views

CVE-2007-6502

Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to obtain sensitive information via 1 the AdminName and AdminLevel parameters to fp2000/NEWSRVR.asp, which discloses usernames; and 2 certain XML HTTP requests to hosting/css.asp using Microsoft.XMLHTTP or...

5.5CVSS5.8AI score0.0275EPSS
SaveExploits1References9
Rows per page
Query Builder