674 matches found
CVE-2022-1054
The CVE-2022-1054 entry concerns the WordPress RSVP and Event Management plugin before 2.7.8, which lacks authorization checks for exporting entries and hooks the export function to the init action. This allows unauthenticated users to retrieve PII (first name, last name, email) of event-register...
WordPress plugin RSVP and Event Management Plugin 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. The WordPress RSVP and Event Management plugin is vulnerable to an access control error that results from...
WordPress RSVP and Event Management plugin <= 2.7.7 - Unauthenticated Entries Export vulnerability
Unauthenticated Entries Export vulnerability discovered by Daniel Ruf in WordPress RSVP and Event Management plugin versions = 2.7.7. Solution Update the WordPress RSVP and Event Management plugin to the latest available version at least 2.7.8...
Royale Event Management System 1.0 Cross Site Scripting
Exploit Title: Royale Event Management System 1.0 - Cross-site Scripting Stored unauthenticated Date: 17/03/2022 Exploit Author: Mr Empy Software Link: https://www.sourcecodester.com/php/15225/church-management-software-free-download-full-version.html Version: 1.0 Tested on: Linux Title:...
CVE-2022-25114
Event Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the fullname parameter under register.php...
CVE-2022-25114
Event Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the fullname parameter under register.php...
CVE-2022-25114
Event Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the fullname parameter under register.php...
Cross site scripting
Event Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the fullname parameter under register.php...
CVE-2022-25114
Event Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the fullname parameter under register.php...
CVE-2022-25114
The CVE-2022-25114 entry concerns Event Management v1.0, with a reflected XSS weakness in the full_name field of register.php. Affected software is Event Management (v1.0) as described in multiple sources; root cause is unsafe handling/echo of user-supplied input in the registration form, enablin...
Event Management 跨站脚本漏洞
Event Management is an event management system, and a cross-site scripting vulnerability exists in Event Management that could be exploited to obtain a PHPSESSID and use it to manipulate a created system login session...
WordPress RSVP and Event Management plugin <= 2.7.4 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress RSVP and Event Management plugin versions = 2.7.4. Solution Update the WordPress RSVP and Event Management plugin to the latest available version at least 2.7.5...
WordPress RSVP and Event Management plugin <= 2.7.4 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability
Unauthenticated Stored Cross-Site Scripting XSS vulnerability discovered in WordPress RSVP and Event Management plugin versions = 2.7.4. The vulnerability has some limitations in the case of high privilege users. Solution Update the WordPress RSVP and Event Management plugin to the latest availab...
Free School Management Software 1.0 - (multiple) Stored Cross-Site Scripting Vulnerability
Exploit Title: Free School Management Software 1.0 - 'multiple' Stored Cross-Site Scripting XSS Exploit Author: fuzzyap1 Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/15073/free-school-management-software.html Software Link:...
Free School Management Software 1.0 Cross Site Scripting
Exploit Title: Free School Management Software 1.0 - 'multiple' Stored Cross-Site Scripting XSS Exploit Author: fuzzyap1 Date: 7-12-2021 Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/15073/free-school-management-software.html Software Link:...
What is a firewall ❓ Everything you need to know about
In the tech world, a firewall is a wellbeing network framework that screens and controls moving ever closer affiliation traffic dependent upon destined security rules. A firewall ordinarily draws up a line between a confided in affiliation and an untrusted affiliation, like the Internet. What is...
Sourcecodester Online Event Booking and Reservation System HTML Injection Vulnerability
Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by three types of users, namely system administrators, students and teachers. Sourcecodester Online Event Booking and...
Engineers Online Portal 跨站脚本漏洞
Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by three types of users, namely system administrators, students and teachers. Sourcecodester Online Event Booking and...
Engineers Online Portal SQL注入漏洞
Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by three types of users, namely system administrators, students, and instructors. sourcecodester Online Event Booking and...
