Lucene search
+L

321 matches found

Vulnrichment
Vulnrichment
added 2026/03/08 8:2 p.m.5 views

CVE-2026-3766 SourceCodester Web-based Pharmacy Product Management System edit-profile.php cross site scripting

A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The...

5.1CVSS4.3AI score0.0021EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/03/08 8:2 p.m.41 views

CVE-2026-3766 SourceCodester Web-based Pharmacy Product Management System edit-profile.php cross site scripting

A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The...

5.1CVSS0.0021EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/03/08 8:2 p.m.25 views

CVE-2026-3766

A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The...

5.1CVSS4.3AI score0.0021EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2026/03/08 12:0 a.m.12 views

SourceCodester Web-based Pharmacy Product Management System 代码注入漏洞

SourceCodester Web-based Pharmacy Product Management System is an open-source web-based pharmacy product management system developed by SourceCodester. Version 1.0 of the SourceCodester Web-based Pharmacy Product Management System contains a code injection vulnerability. This vulnerability stems...

5.4CVSS5.7AI score0.0021EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/03/08 12:0 a.m.10 views

PT-2026-23977

A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The...

5.1CVSS4.3AI score0.0021EPSS
SaveExploits1References6
NVD
NVD
added 2026/02/01 1:15 p.m.5 views

CVE-2021-47911

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS0.00171EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/02/01 12:15 p.m.3 views

CVE-2021-47911 Affiliate Pro 1.7 Reflected Cross-Site Scripting via Index Module

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS5.1AI score0.00171EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/02/01 12:15 p.m.5 views

EUVD-2021-34760

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS5.9AI score0.00171EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/01 12:15 p.m.4 views

CVE-2021-47911

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS5.9AI score0.00171EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/02/01 12:15 p.m.37 views

CVE-2021-47911 Affiliate Pro 1.7 Reflected Cross-Site Scripting via Index Module

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS0.00171EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/02/01 12:0 a.m.8 views

PT-2026-5556

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS5.9AI score0.00171EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/01/30 9:23 p.m.8 views

CVE-2026-1598

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It i...

5.4CVSS4.3AI score0.00206EPSS
SaveExploits1References1
OSV
OSV
added 2026/01/29 6:16 p.m.7 views

CVE-2026-1598

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It i...

5.4CVSS4.2AI score0.00206EPSS
SaveExploits1References4
NVD
NVD
added 2026/01/29 6:16 p.m.8 views

CVE-2026-1598

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It i...

5.4CVSS0.00206EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/01/29 5:2 p.m.39 views

CVE-2026-1598 Bdtask Bhojon All-In-One Restaurant Management System User Information profile cross site scripting

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It i...

5.1CVSS0.00206EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/01/29 5:2 p.m.7 views

CVE-2026-1598 Bdtask Bhojon All-In-One Restaurant Management System User Information profile cross site scripting

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It i...

5.1CVSS4.3AI score0.00206EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/01/29 5:2 p.m.5 views

CVE-2026-1598

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It i...

5.1CVSS4.3AI score0.00206EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
added 2026/01/29 5:2 p.m.8 views

EUVD-2026-4956

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It i...

5.1CVSS4.3AI score0.00206EPSS
SaveExploits1References4
CVE
CVE
added 2026/01/29 5:2 p.m.24 views

CVE-2026-1598

CVE-2026-1598 affects Bdtask Bhojon All-In-One Restaurant Management System (up to 20260116). The vulnerability lies in the User Information Module, specifically the /dashboard/home/profile function, where manipulating the fullname argument triggers cross-site scripting. The issue is exploitable ...

5.4CVSS4.3AI score0.00206EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2026/01/29 12:0 a.m.9 views

Bdtask Bhojon All-In-One Restaurant Management System: Code Injection Vulnerability

Bdtask Bhojon All-In-One Restaurant Management System is a restaurant management system developed by the Bangladeshi company Bdtask. The versions of the Bdtask Bhojon All-In-One Restaurant Management System prior to 20260116 contained a code injection vulnerability. This vulnerability stemmed fro...

5.4CVSS5.7AI score0.00206EPSS
SaveExploits1References5
Rows per page
Query Builder