Lucene search
K

6 matches found

CNVD
CNVD
added 2025/07/18 12:0 a.m.3 views

Modern Bag contact-back.php File SQL Injection Vulnerability

Modern Bag is an online management system. Modern Bag suffers from a SQL injection vulnerability that stems from an error in the parameter contact-name in file /contact-back.php that lacks validation of externally entered SQL statements. An attacker can use this vulnerability to execute illegal S...

9.8CVSS8.3AI score0.00394EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/08/30 12:0 a.m.4 views

SourceCodester Contact Manager with Export to VCF 跨站脚本漏洞

SourceCodester Contact Manager with Export to VCF is an open source contact manager from SourceCodester. A cross-site scripting vulnerability exists in SourceCodester Contact Manager with Export to VCF version 1.0, which stems from the parameter contactname in the file index.html that can lead to...

5.4CVSS4.4AI score0.00422EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2024/08/30 12:0 a.m.3 views

PT-2024-38952 · Sourcecodester · Sourcecodester Contact Manager With Export To Vcf

Name of the Vulnerable Software and Affected Versions: SourceCodester Contact Manager with Export to VCF version 1.0 Description: A problematic issue has been found, affecting some unknown functionality of the file index.html. The manipulation of the contact name argument leads to cross-site...

5.4CVSS6.3AI score0.00422EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2023/09/09 12:0 a.m.4 views

PT-2023-30916 · Sourcecodester · Sourcecodester Contact Manager App

Name of the Vulnerable Software and Affected Versions: SourceCodester Contact Manager App version 1.0 Description: A critical vulnerability was found in the SourceCodester Contact Manager App, affecting the file delete.php. The manipulation of the contactName argument leads to SQL injection. The...

9.8CVSS7.1AI score0.00721EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2019/09/16 12:0 a.m.3 views

PT-2019-7754 · WordPress · Colorway

Name of the Vulnerable Software and Affected Versions: Colorway theme versions prior to 3.4.2 for WordPress Description: The issue concerns a Cross-Site Scripting XSS problem. It is related to the contactName parameter. There is no information provided about the estimated number of potentially...

6.1CVSS6AI score0.0102EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2014/10/20 6:55 p.m.1 views

CVE-2014-8365

Multiple cross-site scripting XSS vulnerabilities in Xornic Contact Us allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 email parameter to contact.php or 3 PATHINFO to setup.php, related to the "PHPSELF" variable...

4.3CVSS5.4AI score0.01423EPSS
Exploits0References3
Rows per page
Query Builder