Lucene search
K

370 matches found

CNNVD
CNNVD
added 2023/02/26 12:0 a.m.2 views

Dental Clinic Appointment Reservation System 跨站脚本漏洞

Dental Clinic Appointment Reservation System is a Dental Clinic Appointment Reservation System by jkev Individual Developer. A cross-site scripting vulnerability exists in SourceCodester Dental Clinic Appointment Reservation System version 1.0, which stems from an incorrect manipulation of the...

6.1CVSS4.2AI score0.00303EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/02/26 12:0 a.m.2 views

PT-2023-1563 · Sourcecodester · Dental Clinic Appointment Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Dental Clinic Appointment Reservation System version 1.0 Description: A vulnerability was found in the Dental Clinic Appointment Reservation System, affecting the file /APR/signup.php, specifically the POST Parameter Handler...

6.1CVSS4.6AI score0.00303EPSS
Exploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 6:22 a.m.2 views

SUSE CVE-2001-0775

Buffer overflow in xloadimage 4.1 aka xli 1.16 and 1.17 in Linux allows remote attackers to execute arbitrary code via a FACES format image containing a long 1 Firstname or 2 Lastname field...

7.5CVSS8.3AI score0.25562EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:51 a.m.2 views

SUSE CVE-2020-28957

Multiple cross-site scripting XSS vulnerabilities in the Customer Add module of Foxlor v0.10.16 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the name, firstname, or username input fields...

5.4CVSS5.3AI score0.00206EPSS
Exploits1References3
NVD
NVD
added 2023/01/12 10:15 p.m.11 views

CVE-2022-46622

A cross-site scripting XSS vulnerability in Judging Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter...

6.1CVSS5.9AI score0.00218EPSS
Exploits0References1
OSV
OSV
added 2023/01/12 10:15 p.m.0 views

CVE-2022-46622

A cross-site scripting XSS vulnerability in Judging Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter...

6.1CVSS5.9AI score0.00218EPSS
Exploits0References1
Prion
Prion
added 2023/01/12 10:15 p.m.8 views

Cross site scripting

A cross-site scripting XSS vulnerability in Judging Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter...

5.8CVSS5.9AI score0.00218EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/12 12:0 a.m.1 views

PT-2023-14968 · Unknown · Judging Management System

Name of the Vulnerable Software and Affected Versions: Judging Management System version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter. Recommendations: For Judging Management...

6.1CVSS6.6AI score0.00218EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/01/07 12:0 a.m.1 views

MySimplifiedSQL 跨站脚本漏洞

MySimplifiedSQL is an easy to use PHP class from Ivan Personal Developer. It is used to interact with MySQL databases. A cross-site scripting vulnerability exists in MySimplifiedSQL that stems from cross-site scripting due to incorrect manipulation of the parameters FirstName/LastName...

6.1CVSS4.7AI score0.00274EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/12/25 12:0 a.m.5 views

PT-2022-9025 · Unknown · Dwc Network Server Emulator

Name of the Vulnerable Software and Affected Versions: barronwaffles dwc network server emulator affected versions not specified Description: A critical issue has been found in the dwc network server emulator, affecting the update profile function in the file gamespy/gs database.py. The...

9.8CVSS7.3AI score0.00353EPSS
Exploits0References8
CNNVD
CNNVD
added 2022/12/25 12:0 a.m.1 views

dwc_network_server_emulator SQL注入漏洞

dwcnetworkserveremulator is a Nintendo DS and Wii online multiplayer server emulator by barronwaffles individual developer. An SQL injection vulnerability exists in dwcnetworkserveremulator, which stems from a problem with the function updateprofile in the file gamespy/gsdatabase.py, where...

9.8CVSS7AI score0.00353EPSS
Exploits0References5
OSV
OSV
added 2022/12/05 8:15 p.m.1 views

CVE-2022-43097

Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the firstname and lastname parameters of the registration form & login pages...

5.4CVSS5.7AI score0.00383EPSS
Exploits0References1
Prion
Prion
added 2022/08/26 1:15 p.m.8 views

Cross site scripting

An issue was discovered in Online Diagnostic Lab Management System 1.0. There is a stored XSS vulnerability via firstname, address, middlename, lastname , gender, email, contact parameters...

4.9CVSS5.2AI score0.00224EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2022/08/26 12:0 a.m.3 views

Online Diagnostic Lab Management System 跨站脚本漏洞

Online Diagnostic Lab Management System is an online diagnostic lab management system. A cross-site scripting vulnerability exists in Online Diagnostic Lab Management System version 1.0, which originates from an XSS via the firstname, address, middlename, lastname , gender, email, contact...

5.4CVSS5.7AI score0.00224EPSS
Exploits1References3
Packet Storm
Packet Storm
added 2022/07/28 12:0 a.m.196 views

Loan Management System 1.0 Cross Site Scripting

Exploit Title: Loan Management System - Stored XSS on several parameters Date: 28/07/2022 Exploit Author: saitamang Vendor Homepage: sourcecodester Software Link: https://www.sourcecodester.com/sites/default/files/download/razormist/LMS.zip Version: 1.0 Tested on: Centos 7 apache2 + MySQL There a...

Exploits0
OSV
OSV
added 2022/06/23 5:15 p.m.0 views

CVE-2021-29055

Cross Site Scripting XSS vulnerability in sourcecodester School File Management System 1.0 via the Firtstname parameter to the Update Account form in studentprofile.php...

6.1CVSS5.8AI score0.00234EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/06/23 12:0 a.m.1 views

School File Management System 跨站脚本漏洞

School File Management System is a school file management system that stores student files individually and retrieves them later. A cross-site scripting vulnerability exists in School File Management System version 1.0, which can be exploited to cause cross-site scripting attacks via the Firstnam...

6.1CVSS5.2AI score0.00234EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2022/05/25 1:15 a.m.0 views

CVE-2022-29359

A stored cross-site scripting XSS vulnerability in /scas/?page=clubs/applicationform&id=7 of School Club Application System v0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter...

6.1CVSS6.5AI score0.00768EPSS
Exploits1References3
OSV
OSV
added 2022/05/25 1:15 a.m.0 views

CVE-2022-29359

A stored cross-site scripting XSS vulnerability in /scas/?page=clubs/applicationform&id=7 of School Club Application System v0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter...

6.1CVSS6.5AI score0.00768EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/25 12:0 a.m.1 views

School Club Application System 跨站脚本漏洞

School Club Application System is a school club application system by Carlo Montero Personal Developer. A security vulnerability exists in School Club Application System version 0.1, which originates from a stored cross-site scripting XSS vulnerability in /scas/?page=clubs/applicationform&id=7. A...

6.1CVSS6.2AI score0.00768EPSS
Exploits1References3
Rows per page
Query Builder