Lucene search
+L

530 matches found

OSV
OSV
•added 2023/02/26 12:15 p.m.•12 views

CVE-2023-1036

A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /APR/signup.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross...

6.1CVSS3.9AI score0.00784EPSS
SaveExploits1References3
CVE
CVE
•added 2023/02/26 11:49 a.m.•101 views

CVE-2023-1036

The CVE-2023-1036 issue affects SourceCodester Dental Clinic Appointment Reservation System v1.0, specifically the POST Parameter Handler in the /APR/signup.php file. The root cause is manipulation of the firstname parameter, leading to cross-site scripting. Impact is described as a remotely init...

6.1CVSS4.8AI score0.00784EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2023/02/26 12:00 a.m.•15 views

PT-2023-1563 · Sourcecodester · Dental Clinic Appointment Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Dental Clinic Appointment Reservation System version 1.0 Description: A vulnerability was found in the Dental Clinic Appointment Reservation System, affecting the file /APR/signup.php, specifically the POST Parameter Handler...

6.1CVSS4.6AI score0.00784EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/02/26 12:00 a.m.•14 views

Dental Clinic Appointment Reservation System 跨站脚本漏洞

Dental Clinic Appointment Reservation System is a Dental Clinic Appointment Reservation System by jkev Individual Developer. A cross-site scripting vulnerability exists in SourceCodester Dental Clinic Appointment Reservation System version 1.0, which stems from an incorrect manipulation of the...

6.1CVSS4.2AI score0.00784EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/26 12:00 a.m.•4 views

CVE-2023-1036: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /APR/signup.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross...

6.1CVSS3.8AI score0.00784EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/24 12:00 a.m.•1 views

CVE-2023-1006: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been classified as problematic. This affects an unknown part of the component New Record Handler. The manipulation of the argument Firstname/Middlename/Lastname/Suffix/Nationality/Doctor Fullname/Doctor Suff...

5.4CVSS4.1AI score0.00262EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2023/02/15 6:22 a.m.•9 views

SUSE CVE-2001-0775

Buffer overflow in xloadimage 4.1 aka xli 1.16 and 1.17 in Linux allows remote attackers to execute arbitrary code via a FACES format image containing a long 1 Firstname or 2 Lastname field...

7.5CVSS8.3AI score0.16344EPSS
SaveExploits2References3
SUSE CVE
SUSE CVE
•added 2023/02/15 3:51 a.m.•17 views

SUSE CVE-2020-28957

Multiple cross-site scripting XSS vulnerabilities in the Customer Add module of Foxlor v0.10.16 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the name, firstname, or username input fields...

5.4CVSS5.3AI score0.00595EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/07 12:00 a.m.•6 views

CVE-2023-0732: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is the function registration of the file oews/classes/Users.php of the component POST Request Handler. The manipulation of the argument...

6.1CVSS3.9AI score0.0039EPSS
SaveExploits0References2
OSV
OSV
•added 2023/01/12 10:15 p.m.•20 views

CVE-2022-46622

A cross-site scripting XSS vulnerability in Judging Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter...

6.1CVSS5.9AI score0.00497EPSS
SaveExploits0References1
NVD
NVD
•added 2023/01/12 10:15 p.m.•35 views

CVE-2022-46622

A cross-site scripting XSS vulnerability in Judging Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter...

6.1CVSS5.9AI score0.00497EPSS
SaveExploits0References1
Prion
Prion
•added 2023/01/12 10:15 p.m.•25 views

Cross site scripting

A cross-site scripting XSS vulnerability in Judging Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter...

5.8CVSS5.9AI score0.00497EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/12 12:00 a.m.•1 views

CVE-2022-46622: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Judging Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter...

6.1CVSS6.1AI score0.00497EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/01/12 12:00 a.m.•22 views

PT-2023-14968 · Unknown · Judging Management System

Name of the Vulnerable Software and Affected Versions: Judging Management System version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter. Recommendations: For Judging Management...

6.1CVSS6.6AI score0.00497EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/01/07 12:00 a.m.•10 views

MySimplifiedSQL 跨站脚本漏洞

MySimplifiedSQL is an easy to use PHP class from Ivan Personal Developer. It is used to interact with MySQL databases. A cross-site scripting vulnerability exists in MySimplifiedSQL that stems from cross-site scripting due to incorrect manipulation of the parameters FirstName/LastName...

6.1CVSS4.7AI score0.00556EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/07 12:00 a.m.•4 views

CVE-2015-10019: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in foxoverflow MySimplifiedSQL. This issue affects some unknown processing of the file MySimplifiedSQLExamples.php. The manipulation of the argument FirstName/LastName leads to cross site scripting. The attack may be initiated...

6.1CVSS3.8AI score0.00556EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/30 12:00 a.m.•2 views

CVE-2022-4859: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in Joget up to 7.0.33. This issue affects the function submitForm of the file wflow-core/src/main/java/org/joget/plugin/enterprise/UserProfileMenu.java of the component User Profile Menu. The manipulation of the argument...

6.1CVSS3.7AI score0.00499EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/12/25 12:00 a.m.•14 views

dwc_network_server_emulator SQL注入漏洞

dwcnetworkserveremulator is a Nintendo DS and Wii online multiplayer server emulator by barronwaffles individual developer. An SQL injection vulnerability exists in dwcnetworkserveremulator, which stems from a problem with the function updateprofile in the file gamespy/gsdatabase.py, where...

9.8CVSS7AI score0.0071EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/12/25 12:00 a.m.•16 views

PT-2022-9025 · Unknown · Dwc Network Server Emulator

Name of the Vulnerable Software and Affected Versions: barronwaffles dwc network server emulator affected versions not specified Description: A critical issue has been found in the dwc network server emulator, affecting the update profile function in the file gamespy/gs database.py. The...

9.8CVSS7.3AI score0.0071EPSS
SaveExploits0References8
OSV
OSV
•added 2022/12/05 8:15 p.m.•16 views

CVE-2022-43097

Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the firstname and lastname parameters of the registration form & login pages...

5.4CVSS5.7AI score0.00573EPSS
SaveExploits0References1
Rows per page
Query Builder