Online Birth Certificate System 跨站脚本漏洞

Online Birth Certificate System is an online birth certificate system by the individual developer ANUJ KUMAR. A security vulnerability exists in Online Birth Certificate System version v1.2, which stems from multiple cross-site scripting XSS issues in the component /obcs/user/profile.php. An...

PT-2022-19359 · Unknown · Online Birth Certificate System

Name of the Vulnerable Software and Affected Versions: Online Birth Certificate System version 1.2 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname or lname parameters in the /obcs/user/profile.php component. This enabl...

CVE-2021-42868

A Cross Site Scripting XSS vulnerability exists in Chikista Patient Management Software 2.0.2 in the firstname parameter in 1 patient/insert, 2 patientreport, 3 appointmentreport, 4 visitreport, and 5 billdetailreport pages...

CVE-2021-42868

A Cross Site Scripting XSS vulnerability exists in Chikista Patient Management Software 2.0.2 in the firstname parameter in 1 patient/insert, 2 patientreport, 3 appointmentreport, 4 visitreport, and 5 billdetailreport pages...

Chikista Patient Management Software 跨站脚本漏洞

Chikista Patient Management Software is a hospital/clinic management system from Chikista India. Chikista Patient Management Software 2.0.2 has a security vulnerability in the firstname parameter of the 1 Patient/Insertion, 2 Patient Report, 3 Appointment Report, 4 Visit Report, and 5 Billing...

CVE-2021-40909

Cross site scripting XSS vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the firstname, lastname, and email parameters to /ajaxcrud...

CVE-2021-40924

Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the firstname parameter...

CVE-2021-40924

Cross-site scripting XSS vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the firstname parameter...

Command injection

FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the editprofilefirstname parameter to user/editprofile...

CubeCart Stored Cross-Site Scripting Vulnerability

CubeCart is an open source PHP e-commerce software system. A stored cross-site scripting vulnerability exists in CubeCart. Due to insufficient filtering of user-supplied data via the "firstname" and "lastname" HTTP POST parameters passed to the "/index.php" script input, a remotely-authenticated...