CVE-2021-26800

The CVE-2021-26800 entry concerns a CSRF vulnerability in the Change-password.php flow of the PHPgurukul user management system (PHP, using stored procedures, V1.0). Exploitation would enable an attacker to change the password for an arbitrary account, as described in multiple sources. The connec...

CVE-2021-26800: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability in Change-password.php in phpgurukul user management system in php using stored procedure V1.0, allows attackers to change the password to an arbitrary account...

CVE-2020-12429: Improper Neutralization of Special Elements used in an SQL Command

Online Course Registration 2.0 has multiple SQL injections that would can lead to a complete database compromise and authentication bypass in the login pages: admin/change-password.php, admin/checkavailability.php, admin/index.php, change-password.php, checkavailability.php, includes/header.php,...

rz.uni-augsburg.de XSS vulnerability

Open Bug Bounty ID: OBB-670714 Description| Value ---|--- Affected Website:| rz.uni-augsburg.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...