6 matches found
Modern Bag contact-back.php File SQL Injection Vulnerability
Modern Bag is an online management system. Modern Bag suffers from a SQL injection vulnerability that stems from an error in the parameter contact-name in file /contact-back.php that lacks validation of externally entered SQL statements. An attacker can use this vulnerability to execute illegal S...
SourceCodester Contact Manager with Export to VCF 跨站脚本漏洞
SourceCodester Contact Manager with Export to VCF is an open source contact manager from SourceCodester. A cross-site scripting vulnerability exists in SourceCodester Contact Manager with Export to VCF version 1.0, which stems from the parameter contactname in the file index.html that can lead to...
PT-2024-38952 · Sourcecodester · Sourcecodester Contact Manager With Export To Vcf
Name of the Vulnerable Software and Affected Versions: SourceCodester Contact Manager with Export to VCF version 1.0 Description: A problematic issue has been found, affecting some unknown functionality of the file index.html. The manipulation of the contact name argument leads to cross-site...
PT-2023-30916 · Sourcecodester · Sourcecodester Contact Manager App
Name of the Vulnerable Software and Affected Versions: SourceCodester Contact Manager App version 1.0 Description: A critical vulnerability was found in the SourceCodester Contact Manager App, affecting the file delete.php. The manipulation of the contactName argument leads to SQL injection. The...
PT-2019-7754 · WordPress · Colorway
Name of the Vulnerable Software and Affected Versions: Colorway theme versions prior to 3.4.2 for WordPress Description: The issue concerns a Cross-Site Scripting XSS problem. It is related to the contactName parameter. There is no information provided about the estimated number of potentially...
CVE-2014-8365
Multiple cross-site scripting XSS vulnerabilities in Xornic Contact Us allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 email parameter to contact.php or 3 PATHINFO to setup.php, related to the "PHPSELF" variable...