567 matches found
PT-2023-18800 · Webchess · Webchess
Name of the Vulnerable Software and Affected Versions: WebChess versions 0.9.0 and 1.0.0.rc2 Description: The issue allows SQL injection in WebChess, affecting files such as mainmenu.php, chess.php, and opponentspassword.php. Specifically, the txtFirstName and txtLastName variables are vulnerable...
HealthMateWeb 跨站脚本漏洞
HealthMateWeb is a web application used in conjunction with HealthMate's Android application. HealthMateWeb suffers from a cross-site scripting vulnerability that stems from unknown functionality in the file createaccount.php, where manipulation of the parameters...
PT-2023-10198 · Foxoverflow · Mysimplifiedsql
Name of the Vulnerable Software and Affected Versions: foxoverflow MySimplifiedSQL affected versions not specified Description: A problematic issue has been found in foxoverflow MySimplifiedSQL, affecting the processing of the file MySimplifiedSQL Examples.php. The manipulation of the...
Joget 跨站脚本漏洞
Joget is an open source no-code/low-code application platform from Joget Open Source. For faster and simpler digital conversion DX. Joget versions prior to 7.0.34 cross-site scripting vulnerability , the vulnerability stems from the file...
Event Registration App CSV Injection Vulnerability
Event Registration App is a JavaScript application for registering event participants by Carlo Montero Personal Developer. A CSV injection vulnerability exists in Carlo Montero Event Registration App v1.0, which stems from improper use of the formula elements of the First Name, Contact, and Remar...
CVE-2022-44830
Sourcecodester Event Registration App v1.0 was discovered to contain multiple CSV injection vulnerabilities via the First Name, Contact and Remarks fields. These vulnerabilities allow attackers to execute arbitrary code via a crafted excel file...
Input validation
Sourcecodester Event Registration App v1.0 was discovered to contain multiple CSV injection vulnerabilities via the First Name, Contact and Remarks fields. These vulnerabilities allow attackers to execute arbitrary code via a crafted excel file...
PT-2022-27319 · Sourcecodester · Sourcecodester Event Registration App
Name of the Vulnerable Software and Affected Versions: Sourcecodester Event Registration App version 1.0 Description: The issue concerns multiple CSV injection vulnerabilities found in the Sourcecodester Event Registration App. These vulnerabilities are exploited via the First Name, Contact, and...
Event Registration App 安全漏洞
Event Registration App is a JavaScript application for registering event participants by Carlo Montero Personal Developer. A CSV injection vulnerability exists in Carlo Montero Event Registration App v1.0, which stems from improper use of the formula elements of the First Name, Contact, and Remar...
CVE-2022-32407
Softr v2.0 was discovered to contain a Cross-Site Scripting XSS vulnerability via the First Name parameter under the Create A New Account module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
PT-2022-21304 · Softr · Softr
Name of the Vulnerable Software and Affected Versions: Softr version 2.0 Description: A Cross-Site Scripting XSS issue was found, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload. The vulnerability is exploited through the First Name parameter under the Create A N...
PT-2022-23847 · Sourcecodester · Sourcecodester Online Medicine Ordering System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Medicine Ordering System version 1.0 Description: A problematic issue was found in the system, affecting an unknown functionality of the file /omos/admin/?page=user/list. The manipulation of the First Name, Middle Name,...
CVE-2022-3587
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component My Account. The manipulation of the argument First Name leads to cross site scripting. The attack...
CVE-2022-3587
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component My Account. The manipulation of the argument First Name leads to cross site scripting. The attack...
Cross site scripting
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component My Account. The manipulation of the argument First Name leads to cross site scripting. The attack...
PT-2022-22980 · Unknown · Sourcecodester Simple Cold Storage Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Cold Storage Management System version 1.0 Description: A vulnerability was found in the My Account component, where the manipulation of the First Name argument leads to cross-site scripting. The attack can be launched...
Simple Cold Storage Management System 跨站脚本漏洞
Simple Cold Storage Management System is a Simple Cold Storage Management System by Carlo Montero Personal Developer. A security vulnerability exists in SourceCodester Simple Cold Storage Management System version 1.0, which stems from a cross-site scripting attack due to an incorrect manipulatio...
Sanitization Management System 安全漏洞
Sanitization Management System is a sanitization management system developed by Carlo Montero. A security vulnerability exists in Sanitization Management System version 1.0, which is a cross-site scripting vulnerability due to manipulation of the parameter "First Name/Middle Name/Last Name"...
Wedding Hall Booking System 跨站脚本漏洞
Wedding Hall Booking System is a simple PHP-titled wedding hall booking system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in SourceCodester Wedding Hall Booking System, which stems from an unknown portion of the Staff User Profile code in its...