CVE-2020-23982

DesignMasterEvents Conference management 1.0.0 has cross site scripting via the 'certificate.php'...

CVE-2020-23980

DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page...

CVE-2020-23982: Improper Neutralization of Input During Web Page Generation

DesignMasterEvents Conference management 1.0.0 has cross site scripting via the 'certificate.php'...

PT-2020-15612

Name of the Vulnerable Software and Affected Versions DesignMasterEvents Conference management version 1.0.0 Description The issue allows SQL Injection via the username field on the administrator login page. Recommendations For DesignMasterEvents Conference management version 1.0.0, avoid using t...

CVE-2020-23980: Improper Neutralization of Special Elements used in an SQL Command

DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page...

PT-2020-15614

Name of the Vulnerable Software and Affected Versions DesignMasterEvents Conference management version 1.0.0 Description The issue concerns a cross-site scripting problem. It is related to the 'certificate.php' file, which suggests that the vulnerability can be exploited through this specific...