GZ Scripts GZ E Learning Platform 跨站脚本漏洞

GZ Scripts GZ E Learning Platform is a php e-learning platform from GZ Scripts. A cross-site scripting vulnerability exists in GZ Scripts GZ E Learning Platform that stems from an unknown issue...

CVE-2023-3564 GZ Scripts GZ Multi Hotel Booking System index.php cross site scripting

A vulnerability was found in GZ Scripts GZ Multi Hotel Booking System 1.8. It has been classified as problematic. Affected is an unknown function of the file /index.php. The manipulation of the argument adults/children/calid leads to cross site scripting. It is possible to launch the attack...

CVE-2023-3563 GZ Scripts GZ E Learning Platform URL Parameter cross site scripting

A vulnerability was found in GZ Scripts GZ E Learning Platform 1.8 and classified as problematic. This issue affects some unknown processing of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-233357 was...

CVE-2023-3563

The CVE-2023-3563 entry concerns GZ Scripts’ GZ E Learning Platform 1.8. The vulnerability affects the URL Parameter Handler component, caused by insecure/unknown processing that enables cross-site scripting (XSS) and can be exploited remotely. The available sources do not specify a fixed version...

CVE-2023-3563 GZ Scripts GZ E Learning Platform URL Parameter cross site scripting

A vulnerability was found in GZ Scripts GZ E Learning Platform 1.8 and classified as problematic. This issue affects some unknown processing of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-233357 was...

CVE-2023-3562

GZ Scripts PHP CRM Platform 1.8 is affected by CVE-2023-3562. The vulnerability arises from improper handling of the action parameter in /index.php, enabling cross-site scripting. Reports consistently cite remote feasibility via a network vector, with the root cause described as manipulation of a...

CVE-2023-3561

The CVE-2023-3561 entry concerns GZ Scripts PHP GZ Hotel Booking Script 1.8. Affected component: /load.php. Root cause: lack of proper input handling for parameters first_name/second_name/phone/address_1/country leads to cross-site scripting. Impact: allows remote initiation of the attack; detail...

CVE-2023-3561 GZ Scripts PHP GZ Hotel Booking Script load.php cross site scripting

A vulnerability, which was classified as problematic, was found in GZ Scripts PHP GZ Hotel Booking Script 1.8. This affects an unknown part of the file /load.php. The manipulation of the argument firstname/secondname/phone/address1/country leads to cross site scripting. It is possible to initiate...

CVE-2023-3560 GZ Scripts Ticket Booking Script load.php cross site scripting

A vulnerability, which was classified as problematic, has been found in GZ Scripts Ticket Booking Script 1.8. Affected by this issue is some unknown functionality of the file /load.php. The manipulation of the argument firstname/secondname/phone/address1/country leads to cross site scripting. The...

CVE-2023-3560

CVE-2023-3560 relates to a cross-site scripting vulnerability in GZ Scripts Ticket Booking Script 1.8, specifically affecting the /load.php functionality. The root cause is improper handling of input parameters (first_name/second_name/phone/address_1/country), enabling remote attacker-controlled ...

CVE-2023-3559 GZ Scripts PHP GZ Appointment Scheduling Script load.php cross site scripting

A vulnerability classified as problematic was found in GZ Scripts PHP GZ Appointment Scheduling Script 1.8. Affected by this vulnerability is an unknown functionality of the file /load.php. The manipulation of the argument firstname/secondname/phone/address1/country leads to cross site scripting...

CVE-2023-3558

CVE-2023-3558 affects GZ Scripts Event Booking Calendar version 1.8, specifically the /load.php file. The vulnerability arises from manipulation of parameters (first_name, second_name, phone, address_1, country) leading to cross-site scripting. The issue is described as exploitable remotely in mu...

CVE-2023-3557 GZ Scripts Property Listing Script preview.php cross site scripting

A vulnerability was found in GZ Scripts Property Listing Script 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /preview.php. The manipulation of the argument page/layout/sortby leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2023-3557

CVE-2023-3557 affects GZ Scripts Property Listing Script 1.0. A cross-site scripting vulnerability arises from manipulating the /preview.php argument page/layout/sort_by, with remote exploitation potential. Multiple sources confirm this issue but do not provide a fix in the initial record. Remedi...

CVE-2023-3557 GZ Scripts Property Listing Script preview.php cross site scripting

A vulnerability was found in GZ Scripts Property Listing Script 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /preview.php. The manipulation of the argument page/layout/sortby leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2023-3556 GZ Scripts Car Listing Script PHP preview.php cross site scripting

A vulnerability was found in GZ Scripts Car Listing Script PHP 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file /preview.php. The manipulation of the argument page/sortby leads to cross site scripting. The attack can be initiated remotely. VDB-233350 i...

CVE-2023-3556

GZ Scripts Car Listing Script PHP 1.8 is affected, with a cross-site scripting vulnerability in /preview.php triggered by manipulating the page/sort_by parameter. The issue allows remote attack and is documented across multiple sources (CVE-2023-3556). Root cause is unknown in publicly provided d...

CVE-2023-3555 GZ Scripts PHP Vacation Rental Script preview.php cross site scripting

A vulnerability was found in GZ Scripts PHP Vacation Rental Script 1.8. It has been classified as problematic. This affects an unknown part of the file /preview.php. The manipulation of the argument page/layout/sortby/propertyid leads to cross site scripting. It is possible to initiate the attack...

CVE-2023-3555

The CVE-2023-3555 entry concerns GZ Scripts PHP Vacation Rental Script 1.8, with a cross-site scripting (XSS) flaw in an unknown area of /preview.php. The vulnerability is triggered by manipulating the arguments page, layout, sort_by, and property_id, allowing a remote attacker to exploit the iss...

CVE-2023-3554

CVE-2023-3554 affects GZ Scripts GZ Forum Script 1.8. The vulnerability is in /preview.php where manipulating parameters such as catid, topicid, topic, topic message, or free name enables cross-site scripting. The issue can be exploited remotely. Connected sources corroborate the same description...