CVE-2026-42758

CVE-2026-42758 CVE-2026-42758 Exploit de WebinarIgnition Ejemplos de uso Uso básico python3 exploit.py https://target.example.com -e [email protected] Especificar la página del webinar python3 exploit.py https://target.example.com -e [email protected] -w...

CVE-2022-40348_Intern-Record-System-Cross-site-Scripting-V1.0-Vulnerability-Unauthenticated

CVE-2022-40348: Intern Record System - Cross-site Scripting XSS no autenticado en 'name' y 'email' Título del Exploit: Intern Record System - Cross-site Scripting XSS no autenticado en 'name' y 'email' Fecha: 2022-06-09 Autor del Exploit: Hamdi Sevben Página del Vendedor:...

JS Help Desk <= 2.8.1 - SQL Injection

The JS Help Desk – Best Help Desk & Support Plugin plugin for WordPress is vulnerable to SQL Injection via the 'email' and 'trackingid' parameters in all versions up to 2.8.2 exclusive due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S...

OpenCATS 0.9.6 - Cross-Site Scripting

OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the email parameter in the Check Email function. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

CVE-2024-30998

PHPGurukul Men Salon Management System 2.0 Bienvenido al repositorio de PHPGurukul Men Salon Management System 2.0. Este proyecto tiene como objetivo proporcionar un sistema robusto para la gestión de salones de belleza masculinos. Vulnerabilidades de Seguridad CVE-2024-30998 Descripción:...

CVE-2024-34327

CVE-2024-34327 SQL Injection Vulnerability Checker This script V-24-02-001SQLiCheck.py is a proof-of-concept PoC tool to verify the presence of a time-based blind SQL injection vulnerability affecting the password-reset-token.php endpoint, identified as CVE-2024-34327. ⚠️ Disclaimer This tool is...

CVE-2023-49546

CVE-2023-49546 Customer Support System 1.0 - Vulnerabilidad de inyección SQL en el parámetro "email" durante la operación "savestaff" Descripción : Existe una vulnerabilidad de inyección SQL en la versión 1 del Customer Support System. Un atacante malintencionado puede ejecutar comandos SQL en la...

CVE-2025-50866

CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting XSS vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user s browser, potentially leading t...

CVE-2023-41652

CVE-2023-41652 RSVPMarker = 10.6.6 - Inyección SQL sin autenticación Descripción: El plugin RSVPMarker para WordPress es vulnerable a la inyección SQL a través del parámetro 'email' en versiones hasta, e incluyendo, la 10.6.6 debido a un escape insuficiente en el parámetro proporcionado por el...

cve-2023-22515-exp

cve-2023-22515-exp Script de explotación en Python para cve-2023-22515 Parámetros: root@kitploit: -h, --help show this help message and exit -H HOST, --host HOST 指定url -U USERNAME, --username USERNAME 指定用户名 -PW PASSWORD, --password PASSWORD 指定密码 -E EMAIL, --email EMAIL 指定邮箱 -P PROXIES, --proxies...

CVE-2026-86268

A vulnerability was detected in itsourcecode School Management System 1.0. Impacted is an unknown function of the file UserLogin.php. The manipulation of the argument email results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-86226

Projectwolds Online Attendance System 1.0 contains a cross-site scripting (XSS) vulnerability in the file profile.php , triggered by manipulation of the email argument. The flaw allows a remote attacker with low privileges to inject scripts if a user interacts with the crafted request. The CVSS 3...

CVE-2026-86226 Projectwolds Online Attendance System profile.php cross site scripting

A security flaw has been discovered in Projectwolds Online Attendance System 1.0. Affected by this issue is some unknown functionality of the file profile.php. The manipulation of the argument email results in cross site scripting. The attack may be performed from remote. The exploit has been...

CVE-2025-51411

🛡️ Divulgación de CVE: CVE-2025-51411 — XSS Reflejado en Institute-of-Current-Students Fecha de divulgación: 25 de julio de 2025 ID de CVE: CVE-2025-51411 Severidad: MEDIA CVSS 6.1 🧩 Resumen Existe una vulnerabilidad de Cross-Site Scripting XSS reflejado en el proyecto Institute-of-Current-Student...

EUVD-2026-72128

A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-end/login.php. This manipulation of the argument email causes improper authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

CVE-2026-86180 code-projects Task Management System In PHP Login index.php sql injection

A vulnerability has been found in code-projects Task Management System In PHP 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The...

CVE-2026-86180

A SQL injection vulnerability affects the Login component of code-projects Task Management System In PHP 1.0 , specifically through manipulation of the email parameter in /index.php. The attack is remote and requires no authentication or user interaction , with a CVSS 3.1 score of 7.3 (HIGH) . Th...

PT-2026-86573

Name of the Vulnerable Software and Affected Versions Projectwolds Online Attendance System version 1.0 Description A remote cross-site scripting issue exists in the profile.php file. The flaw allows for the manipulation of the email variable to execute malicious scripts in the context of the...

EUVD-2026-70820

A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patientlogin.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be...

CVE-2026-85225

A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patientlogin.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be...