Lucene search
+L

364 matches found

NVD
NVD
•added 2026/03/08 8:15 p.m.•13 views

CVE-2026-3766

A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The...

5.4CVSS0.00336EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/03/08 8:02 p.m.•36 views

CVE-2026-3766

A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The...

5.1CVSS4.3AI score0.00336EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/08 8:02 p.m.•7 views

CVE-2026-3766 SourceCodester Web-based Pharmacy Product Management System edit-profile.php cross site scripting

A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The...

5.1CVSS4.3AI score0.00336EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/03/08 8:02 p.m.•53 views

CVE-2026-3766 SourceCodester Web-based Pharmacy Product Management System edit-profile.php cross site scripting

A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The...

5.1CVSS0.00336EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/03/08 12:00 a.m.•18 views

PT-2026-23977

A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The...

5.1CVSS4.3AI score0.00336EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/08 12:00 a.m.•0 views

CVE-2026-3766: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The...

5.4CVSS4AI score0.00336EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/08 12:00 a.m.•29 views

SourceCodester Web-based Pharmacy Product Management System 代码注入漏洞

SourceCodester Web-based Pharmacy Product Management System is an open-source web-based pharmacy product management system developed by SourceCodester. Version 1.0 of the SourceCodester Web-based Pharmacy Product Management System contains a code injection vulnerability. This vulnerability stems...

5.4CVSS5.7AI score0.00336EPSS
SaveExploits1References5
NVD
NVD
•added 2026/02/01 1:15 p.m.•13 views

CVE-2021-47911

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS0.00182EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/02/01 12:15 p.m.•48 views

CVE-2021-47911 Affiliate Pro 1.7 Reflected Cross-Site Scripting via Index Module

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS0.00182EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/02/01 12:15 p.m.•12 views

EUVD-2021-34760

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS5.9AI score0.00182EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/02/01 12:15 p.m.•5 views

CVE-2021-47911 Affiliate Pro 1.7 Reflected Cross-Site Scripting via Index Module

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS5.1AI score0.00182EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/02/01 12:15 p.m.•7 views

CVE-2021-47911

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS5.9AI score0.00182EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2026/02/01 12:00 a.m.•17 views

PT-2026-5556

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS5.9AI score0.00182EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/01 12:00 a.m.•0 views

CVE-2021-47911: Improper Neutralization of Input During Web Page Generation

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS5.8AI score0.00182EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/30 9:23 p.m.•13 views

CVE-2026-1598

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It i...

5.4CVSS4.3AI score0.00214EPSS
SaveExploits1References1
OSV
OSV
•added 2026/01/29 6:16 p.m.•15 views

CVE-2026-1598

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It i...

5.4CVSS4.2AI score0.00214EPSS
SaveExploits1References4
NVD
NVD
•added 2026/01/29 6:16 p.m.•15 views

CVE-2026-1598

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It i...

5.4CVSS0.00214EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/01/29 5:02 p.m.•49 views

CVE-2026-1598 Bdtask Bhojon All-In-One Restaurant Management System User Information profile cross site scripting

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It i...

5.1CVSS0.00214EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/01/29 5:02 p.m.•7 views

CVE-2026-1598

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It i...

5.1CVSS4.3AI score0.00214EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2026/01/29 5:02 p.m.•44 views

CVE-2026-1598

CVE-2026-1598 affects Bdtask Bhojon All-In-One Restaurant Management System (up to 20260116). The vulnerability lies in the User Information Module, specifically the /dashboard/home/profile function, where manipulating the fullname argument triggers cross-site scripting. The issue is exploitable ...

5.4CVSS4.3AI score0.00214EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder