PT-2024-38601 · Unknown · Codeastro Online Railway Reservation System

Name of the Vulnerable Software and Affected Versions: CodeAstro Online Railway Reservation System version 1.0 Description: A problematic issue was found in the CodeAstro Online Railway Reservation System, affecting an unknown function of the file /admin/admin-add-employee.php of the component Ad...

CVE-2024-37803

Multiple stored cross-site scripting XSS vulnerabilities in CodeProjects Health Care hospital Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname and lname parameters under the Staff Info page...

Health Care hospital Management System SQL Injection Vulnerability

Health Care hospital Management System is an open source health care hospital management system from Code-Projects. A SQL injection vulnerability exists in Health Care hospital Management System v1.0, which originated from a vulnerability that allows an attacker to execute arbitrary web script or...

CVE-2024-5385

CVE-2024-5385 affects oretnom23 Online Car Wash Booking System 1.0. A cross-site scripting flaw exists in the /admin/?page=user/list endpoint triggered by manipulating the First Name/Last Name field with a script payload. The issue is exploitable remotely and involves user interaction. Documented...

CVE-2024-5385: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in oretnom23 Online Car Wash Booking System 1.0. This issue affects some unknown processing of the file /admin/?page=user/list. The manipulation of the argument First Name/Last Name with the input leads to cross site scripting...

PT-2024-35951 · Unknown · Oretnom23 Online Car Wash Booking System

Name of the Vulnerable Software and Affected Versions: oretnom23 Online Car Wash Booking System version 1.0 Description: A problematic issue has been found in the system, affecting the processing of the file "/admin/?page=user/list". The manipulation of the argument First Name/Last Name with the...

GHSA-2F46-4XJM-73X5 Passbolt API Stored XSS on first/last name during setup

Description An administrator can craft a user with a malicious first name and last name, using a payload such as '; ? The user will then receive the invitation email and click on the setup link. The setup start page served by the server will fire the XSS. Impact of issue An administrator could us...

CVE-2024-34224

Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the firstname, middlename, lastname parameters...

WordPress Folders Pro plugin <= 3.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User First Name and Last Name vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting via User First Name and Last Name vulnerability discovered by mike harris in WordPress Plugin Folders versions = 3.0.2...

CVE-2024-3868: Improper Neutralization of Input During Web Page Generation

The Folders Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a user's First Name and Last Name in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

PT-2024-28123 · WordPress · Folders Pro

Name of the Vulnerable Software and Affected Versions: Folders Pro plugin for WordPress versions up to, and including, 3.0.2 Description: The issue is related to Stored Cross-Site Scripting, which occurs due to insufficient input sanitization and output escaping of a user's First Name and Last...

Folders Pro < 3.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User First Name and Last Name

Description The Folders Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a user's First Name and Last Name in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-33303

SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "First Name" under Add Users...

CVE-2024-33303

SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "First Name" under Add Users...

CVE-2024-33303: Improper Neutralization of Input During Web Page Generation

SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "First Name" under Add Users...

Product Show Room 跨站脚本漏洞

Product Show Room Site is a product show room website by Carlo Montero's personal developer. A cross-site scripting vulnerability exists in Product Show Room 1.0 and prior versions, which originates from an easy cross-site scripting attack via the First Name parameter under Add User...

PT-2024-25193 · Sourcecodester · Sourcecodester Product Show Room

Name of the Vulnerable Software and Affected Versions: SourceCodester Product Show Room version 1.0 Description: The issue concerns Cross Site Scripting XSS via the First Name field under Add Users. This allows for potential malicious script injection. Recommendations: For SourceCodester Product...

CVE-2024-33306

SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting XSS via "First Name" parameter in Create User...

CVE-2024-33306: Improper Neutralization of Input During Web Page Generation

SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting XSS via "First Name" parameter in Create User...

CVE-2024-33306

SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting XSS via "First Name" parameter in Create User...