PT-2023-16008 · Okta · Okta Advanced Server Access Client

Name of the Vulnerable Software and Affected Versions: Okta Advanced Server Access Client versions 1.13.1 through 1.65.0 Description: The issue is related to command injection due to an outdated third-party library called webbrowser. This library is used by the Okta Advanced Server Access Client...

Namaste! LMS < 2.6 - Admin+ Stored XSS

The plugin does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. One XSS issue was fixed in version 2.5.9.9. The...

SUSE CVE-2015-3180

lib/navigationlib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to obtain sensitive course-structure information by leveraging access to a student account with a suspended enrolment...

CVE-2022-46502

Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /studentenrollment/admin/login.php...

CVE-2022-46502

Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /studentenrollment/admin/login.php...

Sql injection

Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /studentenrollment/admin/login.php...

Online Student Enrollment System SQL注入漏洞

Online Student Enrollment System is an online student enrollment system developed by Lyndon Bermoy, an individual developer. A security vulnerability exists in Online Student Enrollment System v1.0, which stems from a username parameter in its /studentenrollment/admin/login.php file that allows a...

CVE-2022-46502

Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /studentenrollment/admin/login.php...

CVE-2022-46502

CVE-2022-46502 affects Online Student Enrollment System v1.0. A SQL injection vulnerability exists in the username parameter of /student_enrollment/admin/login.php, impacting confidentiality, integrity, and availability (CVSS v3.1: 9.8, HIGH). No exploitation details are provided in the documents...

CVE-2022-46502

Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /studentenrollment/admin/login.php...

PT-2023-14950 · Unknown · Online Student Enrollment System

Name of the Vulnerable Software and Affected Versions: Online Student Enrollment System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter at the "/student enrollment/admin/login.php" API endpoint...

CVE-2022-46503

A cross-site scripting XSS vulnerability in the component /admin/register.php of Online Student Enrollment System v1.0 allows attackers to execute arbitrary web scripts via a crafted payload injected into the name parameter...

CVE-2022-46503

A cross-site scripting XSS vulnerability in the component /admin/register.php of Online Student Enrollment System v1.0 allows attackers to execute arbitrary web scripts via a crafted payload injected into the name parameter...

Cross site scripting

A cross-site scripting XSS vulnerability in the component /admin/register.php of Online Student Enrollment System v1.0 allows attackers to execute arbitrary web scripts via a crafted payload injected into the name parameter...

CVE-2022-46503

The CVE-2022-46503 entry relates to a cross-site scripting (XSS) vulnerability in Online Student Enrollment System v1.0, affecting the /admin/register.php component where an attacker can inject a payload via the name parameter. The issue is confirmed across multiple records; the core details spec...

PT-2023-14951 · Unknown · Online Student Enrollment System

Name of the Vulnerable Software and Affected Versions: Online Student Enrollment System version 1.0 Description: A cross-site scripting XSS issue in the /admin/register.php component allows attackers to execute arbitrary web scripts via a crafted payload injected into the name parameter...

CVE-2022-46503

A cross-site scripting XSS vulnerability in the component /admin/register.php of Online Student Enrollment System v1.0 allows attackers to execute arbitrary web scripts via a crafted payload injected into the name parameter...

Online Student Enrollment System 跨站脚本漏洞

Online Student Enrollment System is an online student enrollment system by Lyndon Bermoy Individual Developer. A security vulnerability exists in Online Student Enrollment System version v1.0, which stems from a cross-site scripting XSS vulnerability in the component /admin /register.php that...

CVE-2022-46503

A cross-site scripting XSS vulnerability in the component /admin/register.php of Online Student Enrollment System v1.0 allows attackers to execute arbitrary web scripts via a crafted payload injected into the name parameter...

Authentication flaw

authentik is an open-source Identity Provider focused on flexibility and versatility. Versions prior to 2022.11.4 and 2022.10.4 are vulnerable to Improper Authentication. Token reuse in invitation URLs leads to access control bypass via the use of a different enrollment flow than in the one...