CVE-2021-45416

CVE-2021-45416 RosarioSIS 8.2.1 中存在反射型跨站脚本（XSS）漏洞，攻击者可通过 modules/Scheduling/Courses.php 脚本中的 searchterm 参数注入任意 HTML。 厂商：francoisjacquet 厂商网站：https://www.rosariosis.org/ 受影响产品：RosarioSIS 受影响版本：v8.2.1，但推测更早版本也可能受影响 复现步骤： 使用 RosarioSIS 8.2.1。 打开存在 XSS 漏洞的...

CVE-2026-4238: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/courses.php. The manipulation of the argument coursecode leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclos...

CVE-2024-3770: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Student Record System 3.20 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manage-courses.php?del=1. The manipulation of the argument del leads to sql injection. The attack can be launched remotely. T...

Cross site scripting

Reflected Cross-site scripting XSS vulnerability in RosarioSIS 8.2.1 allows attackers to inject arbitrary HTML via the searchterm parameter in the modules/Scheduling/Courses.php script...

CVE-2021-45416

Reflected Cross-site scripting XSS vulnerability in RosarioSIS 8.2.1 allows attackers to inject arbitrary HTML via the searchterm parameter in the modules/Scheduling/Courses.php script...

PT-2022-12347

Name of the Vulnerable Software and Affected Versions RosarioSIS version 8.2.1 Description A Reflected Cross-site scripting XSS issue allows attackers to inject arbitrary HTML via the search term parameter in the "modules/Scheduling/Courses.php" script. Recommendations For RosarioSIS version 8.2....

CVE-2021-45416: Improper Neutralization of Input During Web Page Generation

Reflected Cross-site scripting XSS vulnerability in RosarioSIS 8.2.1 allows attackers to inject arbitrary HTML via the searchterm parameter in the modules/Scheduling/Courses.php script...

eduhero.net XSS vulnerability

Vulnerable URL: https://eduhero.net/courses.php?search=%27%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 139271 VIP websi...

gaswcc.org XSS vulnerability

Vulnerable URL: http://www.gaswcc.org/esc-courses.php?courselevel=1/-///'/"//--...

CVE-2009-2006: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 searchterm parameter to main/auth/courses.php; the 2 frmtitle and 3 frmcontent parameters in a new personal agenda item action; the 4...