CVE-2023-47446

Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...

CVE-2023-47445

Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...

Sql injection

Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...

CVE-2023-39335

A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to impersonate any existing user during the device enrollment process. This issue poses a significant security risk, as it enables unauthorized access and potentia...

CVE-2023-39335

A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to impersonate any existing user during the device enrollment process. This issue poses a significant security risk, as it enables unauthorized access and potentia...

Security feature bypass

A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to impersonate any existing user during the device enrollment process. This issue poses a significant security risk, as it enables unauthorized access and potentia...

CVE-2023-47445

CVE-2023-47445 affects Pre-School Enrollment version 1.0; a SQL Injection vulnerability exists in the username parameter of the preschool/admin/ page. Root cause is improper input handling allowing crafted input to alter SQL queries, leading to potential confidentiality, integrity, and availabili...

CVE-2023-47445

Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...

PHPGurukul Pre-School Enrollment Security Vulnerability

PHPGurukul Pre-School Enrollment is a web-based preschool enrollment system from PHPGurukul, Inc. A security vulnerability exists in version 1.0 of PHPGurukul Pre-School Enrollment that originates from an easy SQL injection attack via the username parameter in the preschool/admin/ page...

CVE-2023-47446

Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...

CVE-2023-47446

Affected software: PHPGurukul Pre-School Enrollment (Web-based system) v1.0. Vulnerability: Cross-Site Scripting (XSS) on profile.php via the fullname parameter. Root cause (as stated): XSS vulnerability; details on input handling/output encoding not provided. Impact (as stated): enables executio...

CVE-2023-47446

Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...

CVE-2023-39335

A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to impersonate any existing user during the device enrollment process. This issue poses a significant security risk, as it enables unauthorized access and potentia...

CVE-2023-39335

A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to impersonate any existing user during the device enrollment process. This issue poses a significant security risk, as it enables unauthorized access and potentia...

CVE-2023-39335

Ivanti Endpoint Manager Mobile (formerly MobileIron Core) is affected by CVE-2023-39335 across versions 11.10, 11.9, 11.8 and older, enabling an unauthenticated actor to impersonate existing users during device enrollment. Some sources also describe a certificate creation/authentication bypass in...

Ivanti Endpoint Manager Security Vulnerability

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Endpoint Manager versions 11.11, 11.10, and 11.9 and earlier, which originated from a vulnerability that allows an unauthenticated attacker to impersonate a...

PT-2023-26885 · Ivanti · Ivanti Endpoint Manager Mobile

Name of the Vulnerable Software and Affected Versions: Ivanti Endpoint Manager Mobile versions 11.10, 11.9, and 11.8 and older Description: A security issue has been identified that allows an unauthenticated threat actor to impersonate any existing user during the device enrollment process. This...

AZL-35075 CVE-2023-40661 affecting package opensc for versions less than 0.25.1-3

Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user or administrator enrolls cards. To take advantage of these flaws, an attacker must have physical access to the computer system and employ a...

CVE-2023-40661

Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user or administrator enrolls cards. To take advantage of these flaws, an attacker must have physical access to the computer system and employ a...

DEBIAN-CVE-2023-40661

Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user or administrator enrolls cards. To take advantage of these flaws, an attacker must have physical access to the computer system and employ a...