Lucene search
+L

215 matches found

Positive Technologies
Positive Technologies
added 2023/03/15 12:00 a.m.10 views

PT-2023-16943 · Sourcecodester · Sourcecodester Friendly Island Pizza Website/Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Friendly Island Pizza Website and Ordering System version 1.0 Description: A critical issue affects the processing of the file addmem.php of the component POST Parameter Handler. The manipulation of the firstname argument leads...

9.8CVSS7.8AI score0.00763EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2023/03/06 12:00 a.m.16 views

The vulnerability of the signup.php script in the Dental Clinic Appointment Reservation System allows attackers to perform cross-site scripting attacks.

The vulnerability in the signup.php script of the Dental Clinic Appointment Reservation System relates to insufficient protection of the website’s structure when processing the firstname parameter. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks remotely...

5CVSS5.2AI score0.00784EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2023/02/26 12:00 a.m.9 views

Dental Clinic Appointment Reservation System 跨站脚本漏洞

Dental Clinic Appointment Reservation System is a Dental Clinic Appointment Reservation System by jkev Individual Developer. A cross-site scripting vulnerability exists in SourceCodester Dental Clinic Appointment Reservation System version 1.0, which stems from an incorrect manipulation of the...

6.1CVSS4.2AI score0.00784EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/02/26 12:00 a.m.10 views

PT-2023-1563 · Sourcecodester · Dental Clinic Appointment Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Dental Clinic Appointment Reservation System version 1.0 Description: A vulnerability was found in the Dental Clinic Appointment Reservation System, affecting the file /APR/signup.php, specifically the POST Parameter Handler...

6.1CVSS4.6AI score0.00784EPSS
SaveExploits1References5
OSV
OSV
added 2023/01/12 10:15 p.m.16 views

CVE-2022-46622

A cross-site scripting XSS vulnerability in Judging Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter...

6.1CVSS5.9AI score0.00497EPSS
SaveExploits0References1
NVD
NVD
added 2023/01/12 10:15 p.m.26 views

CVE-2022-46622

A cross-site scripting XSS vulnerability in Judging Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter...

6.1CVSS5.9AI score0.00497EPSS
SaveExploits0References1
Prion
Prion
added 2023/01/12 10:15 p.m.21 views

Cross site scripting

A cross-site scripting XSS vulnerability in Judging Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter...

5.8CVSS5.9AI score0.00497EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/12 12:00 a.m.18 views

PT-2023-14968 · Unknown · Judging Management System

Name of the Vulnerable Software and Affected Versions: Judging Management System version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter. Recommendations: For Judging Management...

6.1CVSS6.6AI score0.00497EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/01/07 12:00 a.m.7 views

MySimplifiedSQL 跨站脚本漏洞

MySimplifiedSQL is an easy to use PHP class from Ivan Personal Developer. It is used to interact with MySQL databases. A cross-site scripting vulnerability exists in MySimplifiedSQL that stems from cross-site scripting due to incorrect manipulation of the parameters FirstName/LastName...

6.1CVSS4.7AI score0.00556EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/08/26 12:00 a.m.9 views

Online Diagnostic Lab Management System 跨站脚本漏洞

Online Diagnostic Lab Management System is an online diagnostic lab management system. A cross-site scripting vulnerability exists in Online Diagnostic Lab Management System version 1.0, which originates from an XSS via the firstname, address, middlename, lastname , gender, email, contact...

5.4CVSS5.7AI score0.00554EPSS
SaveExploits1References3
OSV
OSV
added 2022/06/23 5:15 p.m.9 views

CVE-2021-29055

Cross Site Scripting XSS vulnerability in sourcecodester School File Management System 1.0 via the Firtstname parameter to the Update Account form in studentprofile.php...

6.1CVSS5.8AI score0.00898EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/23 12:00 a.m.6 views

School File Management System 跨站脚本漏洞

School File Management System is a school file management system that stores student files individually and retrieves them later. A cross-site scripting vulnerability exists in School File Management System version 1.0, which can be exploited to cause cross-site scripting attacks via the Firstnam...

6.1CVSS5.2AI score0.00898EPSS
SaveExploits1References3
OSV
OSV
added 2022/05/25 1:15 a.m.8 views

CVE-2022-29359

A stored cross-site scripting XSS vulnerability in /scas/?page=clubs/applicationform&id=7 of School Club Application System v0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter...

6.1CVSS6.5AI score0.0115EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/05/25 1:15 a.m.5 views

CVE-2022-29359

A stored cross-site scripting XSS vulnerability in /scas/?page=clubs/applicationform&id=7 of School Club Application System v0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter...

6.1CVSS6.5AI score0.0115EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/05/25 12:00 a.m.8 views

School Club Application System 跨站脚本漏洞

School Club Application System is a school club application system by Carlo Montero Personal Developer. A security vulnerability exists in School Club Application System version 0.1, which originates from a stored cross-site scripting XSS vulnerability in /scas/?page=clubs/applicationform&id=7. A...

6.1CVSS6.2AI score0.0115EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/05/24 3:15 p.m.6 views

CVE-2022-30842

Covid-19 Travel Pass Management System v1.0 is vulnerable to Cross Site Scripting XSS via /ctpms/classes/Users.php?f=save, firstname...

5.4CVSS5.8AI score0.00495EPSS
SaveExploits1References2
NVD
NVD
added 2021/10/01 4:15 p.m.30 views

CVE-2021-40969

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the firstname parameter...

6.1CVSS0.02239EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/10/01 4:15 p.m.10 views

CVE-2021-40969

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the firstname parameter...

6.1CVSS6.6AI score0.02239EPSS
SaveExploits1References4
Prion
Prion
added 2021/10/01 4:15 p.m.25 views

Cross site scripting

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the firstname parameter...

4.3CVSS6AI score0.02239EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
added 2021/10/01 4:15 p.m.32 views

CVE-2021-40969

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the firstname parameter...

6.1CVSS6.4AI score0.02239EPSS
SaveExploits1References3
Rows per page
Query Builder