Lucene search
+L

215 matches found

Cvelist
Cvelist
added 2021/10/01 3:42 p.m.37 views

CVE-2021-40969

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the firstname parameter...

6.2AI score0.02239EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2021/10/01 3:42 p.m.79 views

CVE-2021-40969

Removed by vendor...

6.1CVSS6.2AI score0.02239EPSS
SaveExploits1
Hacker One
Hacker One
added 2021/09/18 10:23 p.m.29 views

TikTok: HTML Injection on tiktoktutorials via firstName parameter

HTML injection was found in tiktoktutorials endpoint which could have potentially allowed attackers to modify the content of the email and trick users into visiting malicious sites. We thank @siratsami for reporting this to our team...

4.3AI score
SaveExploits0
NVD
NVD
added 2021/03/24 2:15 p.m.24 views

CVE-2021-27320

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter...

7.5CVSS0.09299EPSS
SaveExploits3References2
OSV
OSV
added 2021/03/24 2:15 p.m.9 views

CVE-2021-27320

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter...

7.5CVSS7.1AI score0.09299EPSS
SaveExploits3References2
ATTACKERKB
ATTACKERKB
added 2021/03/24 2:15 p.m.7 views

CVE-2021-27320

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter...

7.5CVSS5.7AI score0.09299EPSS
SaveExploits3References4
Prion
Prion
added 2021/03/24 2:15 p.m.22 views

Sql injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter...

5CVSS7.9AI score0.09299EPSS
SaveExploits3References2Affected Software1
Cvelist
Cvelist
added 2021/03/24 1:46 p.m.47 views

CVE-2021-27320

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter...

8.2AI score0.09299EPSS
SaveExploits3References2
zdt
zdt
added 2021/03/03 12:00 a.m.58 views

Doctor Appointment System 1.0 Blind SQL Injection Vulnerability

Exploit Title: Doctor Appointment System 1.0 Blind SQL injection in email parameter CVE: CVE-2021-27319 Exploit Author: Nakul Ratti Vendor Homepage: https://www.sourcecodester.com/php/14182/doctor-appointment-system.html Software Link:...

7.5CVSS0.1AI score0.09299EPSS
SaveExploits4
CNVD
CNVD
added 2018/07/12 12:00 a.m.8 views

PHP Scripts Mall Auditor Website Cross-Site Scripting Vulnerability

PHP Scripts Mall Auditor Website is an accounting auditor website system script by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Auditor Website version 2.0.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with th...

6.1CVSS6AI score0.01049EPSS
SaveExploits4References1
NVD
NVD
added 2018/07/09 12:29 p.m.32 views

CVE-2018-13256

PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter...

6.1CVSS6.1AI score0.01049EPSS
SaveExploits4References2
OSV
OSV
added 2018/07/09 12:29 p.m.11 views

CVE-2018-13256

PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter...

6.1CVSS5.8AI score0.01049EPSS
SaveExploits4References2
ATTACKERKB
ATTACKERKB
added 2018/07/09 12:29 p.m.10 views

CVE-2018-13256

PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter...

6.1CVSS5.4AI score0.01049EPSS
SaveExploits4References4
Openbugbounty
Openbugbounty
added 2018/04/26 6:08 p.m.17 views

vance.ustaxdata.com XSS vulnerability

Open Bug Bounty ID: OBB-608846 Description| Value ---|--- Affected Website:| vance.ustaxdata.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
NVD
NVD
added 2005/11/24 11:03 a.m.24 views

CVE-2005-3795

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to inject arbitrary web script or HTML via 1 the Err parameter in admin/index.php and the 2 firstname and 3 lastname parameters in index.php...

4.3CVSS5.7AI score0.01338EPSS
SaveExploits0References7
Rows per page
Query Builder