PT-2022-11992

Name of the Vulnerable Software and Affected Versions Sourcecodester Stock Management System in PHP/OOP version 1.0 Description A Cross Site Scripting XSS issue exists, allowing remote malicious users to execute arbitrary code via the create user function. This enables remote code execution...

CVE-2021-44114: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in Sourcecodester Stock Management System in PHP/OOP 1.0, which allows remote malicious users to execute arbitrary remote code execution via create user function...

CVE-2019-7550

In JForum 2.1.8, an unauthenticated, remote attacker can enumerate whether a user exists by using the "create user" function. If a register/check/username?username= request corresponds to a username that exists, then an "is already in use" error is produced. NOTE: this product is discontinued...

PT-2019-18641

Name of the Vulnerable Software and Affected Versions JForum version 2.1.8 Description The issue allows an unauthenticated, remote attacker to determine whether a specific user exists by utilizing the "create user" function. This is achieved by sending a register/check/username?username= request...