58495 matches found
CVE-2025-63514
kishan0725 Hospital Management System has a Cross-Site Scripting XSS vulnerability in appsearch.php via the email parameter...
Hospital Management System security vulnerabilities
Hospital Management System is a hospital management software by the individual developer Pon Aravind Boominathan. A security vulnerability exists in Hospital Management System that stems from improper handling of the email parameter in appsearch.php, which could lead to cross-site scripting...
PT-2025-47369
Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System affected versions not specified Description The software contains a Cross-Site Scripting XSS issue in the 'appsearch.php' file. The issue is triggered through the email parameter. This allows for the...
CVE-2025-54320
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests...
Student Record System admin-profile.php file cross-site scripting vulnerability
Student Record System is a software application. Student Record System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the adminname and aemailid parameters of admin-profile.php, which can be exploited to...
CVE-2025-63514: Improper Neutralization of Input During Web Page Generation
kishan0725 Hospital Management System has a Cross-Site Scripting XSS vulnerability in appsearch.php via the email parameter...
WordPress Contact Form Email plugin missing authorization vulnerability
WordPress Contact Form Email plugin is a powerful contact form tool that is mainly used to create contact forms and email the submitted data to a specified address, while supporting data storage, report generation and export features. A lack of authorization vulnerability exists in the WordPress...
CVE-2025-63514
The kishan0725 Hospital Management System is vulnerable to a Cross-Site Scripting (XSS) flaw (CWE-79) within the appsearch.php component. The root cause is the improper neutralization of input during web page generation, specifically via the email parameter. This allows an attacker to inject and ...
CVE-2025-54320: Allocation of Resources Without Limits or Throttling
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests...
Inventory Management System /admin/login.php File SQL Injection Vulnerability
Inventory Management System is an inventory management system. Inventory Management System has a SQL injection vulnerability that stems from the useremail parameter not being effectively filtered in the /admin/login.php file. No details of the vulnerability are available at this time...
CVE-2025-54321
Ascertia SigningHub (versions through 8.6.8 ) is vulnerable to an email bombing attack due to a lack of rate limiting on the reset password function . An authenticated attacker can automate reset password requests to flood a target user's mailbox with a high volume of emails. This can overwhelm t...
CVE-2025-55796
The openml/openml.org web application version v2.0.20241110 uses predictable MD5-based tokens for critical user workflows such as signup confirmation, password resets, email confirmation resends, and email change confirmation. These tokens are generated by hashing the current timestamp formatted ...
CVE-2025-54321: Improper Control of Interaction Frequency
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...
CVE-2025-12760: Authentication Bypass Using an Alternate Path or Channel
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass.This issue affects Email TFA: from 0.0.0 before 2.0.6...
Hospital Management System security vulnerabilities
Hospital Management System is a hospital management software by Pon Aravind Boominathan, an individual developer. A security vulnerability exists in Hospital Management System version v4, which stems from mishandling of the email parameter in admin-panel1.php, which may lead to SQL injection...
Ascertia SigningHub security vulnerability
Ascertia SigningHub is an electronic signature software from Ascertia UK. A security vulnerability exists in Ascertia SigningHub version 8.6.8 and prior versions, which stems from a lack of rate limiting in the Invite Users feature and could lead to email bombing...
CVE-2025-54321
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...
WordPress Make Email Customizer for WooCommerce plugin <= 1.0.6 - Authenticated (Subscriber+) Arbitrary Options Update vulnerability
Authenticated Subscriber+ Arbitrary Options Update vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin Make Email Customizer for WooCommerce versions = 1.0.6...
