154 matches found
PT-2023-26659 · Unknown · Campcodes Beauty Salon Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 1.0 Description: A vulnerability was found in the system, affecting some unknown functionality of the file /admin/admin-profile.php. The manipulation of the adminname argument leads to cross si...
Campcodes Beauty Salon Management System 跨站脚本漏洞
Campcodes Beauty Salon Management System is a beauty salon management system from Campcodes, Inc. A cross-site scripting vulnerability exists in Campcodes Beauty Salon Management System version 1.0, which stems from unknown processing in /admin/admin-profile.php, leading to cross-site scripting v...
Cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Online Student Management System 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. The...
PT-2023-16954 · Sourcecodester · Sourcecodester Online Student Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student Management System version 1.0 Description: A vulnerability has been found in the SourceCodester Online Student Management System. The issue is related to an unknown function of the file profile.php, where the...
Student Management System 跨站脚本漏洞
Student Management System is a simple web-based student management software from the individual developer Sk.Amir Hamza, Bangladesh. A cross-site scripting vulnerability exists in SourceCodester Online Student Management System version 1.0, which stems from incorrect manipulation of the parameter...
CVE-2023-1397: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in SourceCodester Online Student Management System 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. The...
Hospital Management System SQL Injection Vulnerability (CNVD-2022-83601)
Hospital Management System is a hospital management system. A SQL injection vulnerability exists in Hospital Management System v1.0, which includes modules for patient information management, appointment services, and financial management. The vulnerability is related to the lack of validation of...
CVE-2022-27413
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in admin.php...
CVE-2022-27413
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in admin.php...
CVE-2022-27413: Improper Neutralization of Special Elements used in an SQL Command
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in admin.php...
Hospital Management System SQL注入漏洞
Hospital Management System is a hospital management system. A SQL injection vulnerability exists in Hospital Management System v1.0, which includes modules for patient information management, appointment services, and financial management. The vulnerability is related to the lack of validation of...
PT-2022-18409
Name of the Vulnerable Software and Affected Versions Hospital Management System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the adminname parameter in the "admin.php" endpoint. Recommendations For Hospital Management System version 1.0,...
Intelligent core multi-language enterprise website management system 4. 1. 0 SQL injection and upload vulnerabilities-vulnerability warning-the black bar safety net
Vulnerability type: SQL injection Test version: the intelligent core multi-language enterprise website management system 4. 1. 0 Editor Version: KindEditor 4.0.3 Vulnerability description: ① Injection vulnerability Vulnerability file:\Cn\About. asp & \Include\Bottom. asp The exploit: the Add Tabl...
Kaseya 6.2.0.0 Cross Site Scripting
Summary The Kaseya version 6.2.0.0 web interface and possibly other versions is vulnerable to Cross-Site Scripting in the "adminName" variable. 2. Description By submitting malicious input such as the following, it is possible to render javascript in the security context of the Kaseya server:...
sk enterprise website management system batch SQL injection vulnerability-vulnerability warning-the black bar safety net
The first step: open GOOGLE and search inurl:/Html/About. sk. asp? ID=1 3 Second step: put the search to the injection point into Ming the kid, add skadmin table and adminname, password field The third step: the default backend is the server...
Taobao Dr mutual brush platform Alliance upload vulnerability-vulnerability warning-the black bar safety net
In fact, this vulnerability is a dynamic Shopping Mall that upload issue. if session“useridname””" or session“AdminName””" then this is uploadflash. the asp file to access the authentication, you'll need to register a user can upload. With a bright kid direct upload. Find a keyword, but you can...
Xxasp <= 3.3.2 SQL Injection
Exploit for unknown platform in category web applications ============================ Xxasp = 3.3.2 SQL Injection ============================ Name: Xxasp Version: 3.3.2 ===========================================================...
Sql injection
Multiple SQL injection vulnerabilities in Mobilelib GOLD 3 allow remote attackers to execute arbitrary SQL commands via the 1 adminName parameter to cp/auth.php, 2 cid parameter to artcat.php, and 3 catid parameter to show.php...
Mobilelib Gold 3.0 - Authentication Bypass / SQL Injection
------------------Mobilelib Gold v3 Auth Bypass/SQL Multiple Remote Vulnerabilities---------------------------- ---------------------------------------------------------------------------------------------------------------- Script : Mobilelib Gold version : 3.0 Language: PHP Site:...
Mobilelib Gold v3 (Auth Bypass/SQL) Multiple Remote Vulnerabilities
No description provided by source. ------------------Mobilelib Gold v3 Auth Bypass/SQL Multiple Remote Vulnerabilities---------------------------- ---------------------------------------------------------------------------------------------------------------- Script : Mobilelib Gold version : 3.0...