330 matches found
CVE-2021-46362
CVE-2021-46362: FreeMarker Server-seitige Template-Injection in Magnolia CMS Eine Schwachstelle für Server-seitige Template-Injection SSTI in den Formularen zur Registrierung und zum vergessenen Passwort von Magnolia v6.2.3 und niedriger erlaubt es nicht authentifizierten Angreifern, beliebigen...
CVE-2022-4556
CVE-2022-4556 - XSS Memorizzato in SOGo Webmail v5.7.1 🧠 Riepilogo Una vulnerabilità Stored Cross-Site Scripting XSS è stata scoperta nel campo fullName della sezione Preferenze Identità nell'interfaccia web di SOGo , interessando la versione 5.7.1. Un utente autenticato potrebbe iniettare uno...
CVE-2022-3949
CVE-2022-3949 सरल कैशियरिंग सिस्टम में XSS सरल कैशियरिंग सिस्टम क्रॉस साइट स्क्रिप्टिंग XSS के लिए संवेदनशील है - एक दुर्भावनापूर्ण अभिनेता एक समझौता किए गए उपयोगकर्ता के पूरे नाम को XSS पेलोड में बदल सकता है और जब भी कोई व्यवस्थापक उपयोगकर्ता टैब या बिक्री टैब पर जाता है और दुर्भावनापूर्ण अभिनेत...
-CVE-2021-41962
-CVE-2021-41962 विवरण Sourcecodester Vehicle Service Management System 1.0 में vehicleservice में Send Service Request के Owner fullname पैरामीटर के माध्यम से क्रॉस साइट स्क्रिप्टिंग XSS भेद्यता मौजूद है। अतिरिक्त जानकारी NA भेद्यता प्रकार Cross Site Scripting XSS उत्पाद का विक्रेता...
CVE-2026-19207
A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploi...
CVE-2026-19207
Summary: PHPGurukul Company Visitor Management System 1.0 is affected by an input handling flaw in /manage-newvisitors.php where manipulating the fullname parameter enables cross-site scripting. The vulnerability can be triggered remotely and the exploit has been publicly disclosed. The documents...
EUVD-2026-54496
A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploi...
CVE-2026-19207 PHPGurukul Company Visitor Management System manage-newvisitors.php cross site scripting
A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploi...
CVE-2026-59102
Forgejo before 15.0.3 contains a stored cross-site scripting vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by setting a full name containing an HTML payload and triggering an Actions run. When the DEFAULTSHOWFULLNAME option is enabled,...
CVE-2026-11518
A vulnerability was identified in SourceCodester Inventory System 1.0. Affected is an unknown function of the file /users.php of the component User Management Page. The manipulation of the argument fullname/username leads to cross site scripting. The attack is possible to be carried out remotely...
CVE-2026-11518
A vulnerability was identified in SourceCodester Inventory System 1.0. Affected is an unknown function of the file /users.php of the component User Management Page. The manipulation of the argument fullname/username leads to cross site scripting. The attack is possible to be carried out remotely...
CVE-2026-11518 SourceCodester Inventory System User Management users.php cross site scripting
A vulnerability was identified in SourceCodester Inventory System 1.0. Affected is an unknown function of the file /users.php of the component User Management Page. The manipulation of the argument fullname/username leads to cross site scripting. The attack is possible to be carried out remotely...
SourceCodester Inventory System 跨站脚本漏洞
The SourceCodester Inventory System is an open-source inventory system developed by SourceCodester. Version 1.0 of the SourceCodester Inventory System has a cross-site scripting vulnerability. This vulnerability stems from the handling of parameters fullname and username in the users.php componen...
Stored-XSS-in-Inventory-System-using-PHP-and-MySQL
Stored XSS in Inventory System using PHP and MySQL Vulnera...
CVE-2026-40567 FreeScout has HTML Injection in Outgoing Emails via Unsanitized Customer Name in Signature Variables
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, an unauthenticated attacker can inject arbitrary HTML into outgoing emails generated by FreeScout by sending an email with a crafted From display name. The name is stored in the database without sanitization a...
CVE-2026-5583
A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...
EUVD-2026-19111
A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...
CVE-2026-5583
A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...
CVE-2026-5583
CVE-2026-5583 concerns PHPGurukul Online Shopping Portal Project 2.1. The vulnerability targets an unknown part of the file /my-profile.php in the Parameter Handler and arises from manipulating the argument fullname , which leads to a SQL injection. The issue is described as exploitable remotely ...
CVE-2026-5583
A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...