13415 matches found
CVE-2023-3564 GZ Scripts GZ Multi Hotel Booking System index.php cross site scripting
A vulnerability was found in GZ Scripts GZ Multi Hotel Booking System 1.8. It has been classified as problematic. Affected is an unknown function of the file /index.php. The manipulation of the argument adults/children/calid leads to cross site scripting. It is possible to launch the attack...
CVE-2023-3562
GZ Scripts PHP CRM Platform 1.8 is affected by CVE-2023-3562. The vulnerability arises from improper handling of the action parameter in /index.php, enabling cross-site scripting. Reports consistently cite remote feasibility via a network vector, with the root cause described as manipulation of a...
CVE-2023-3564: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in GZ Scripts GZ Multi Hotel Booking System 1.8. It has been classified as problematic. Affected is an unknown function of the file /index.php. The manipulation of the argument adults/children/calid leads to cross site scripting. It is possible to launch the attack...
CVE-2023-3562: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in GZ Scripts PHP CRM Platform 1.8 and classified as problematic. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument action leads to cross site scripting. The attack can be initiated remotely. The identifier of this...
Aplikasi Sistem Informasi Kelulusan CMS 1.0.9 Local File Inclusion
==================================================================================================================================== | Title : Aplikasi Sistem Informasi Kelulusan CMS v 1.0.9 ASIK LFI Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozill...
GZ Multi Hotel Booking System 1.8 Cross Site Scripting
┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...
CRM Platform 1.8 Cross Site Scripting
┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...
CVE-2023-3457
The CVE-2023-3457 entry concerns SourceCodester Shopping Website 1.0, with a vulnerability in the index.php file where manipulating the username parameter enables SQL injection. This allows remote exploitation and the exploit has been disclosed publicly. Affected component: index.php function han...
CVE-2023-3457 SourceCodester Shopping Website index.php sql injection
A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...
PT-2023-24927 · Unknown · Sourcecodester Shopping Website
Name of the Vulnerable Software and Affected Versions: SourceCodester Shopping Website version 1.0 Description: A critical issue has been found, affecting an unknown function of the file index.php. The manipulation of the username argument leads to sql injection, allowing remote attacks. The...
CVE-2023-3457: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...
CVE-2020-18414
Stored cross site scripting XSS vulnerability in Chaoji CMS v2.18 that allows attackers to execute arbitrary code via /index.php?admin-master-webset...
CVE-2020-18413: Improper Neutralization of Input During Web Page Generation
Stored cross site scripting XSS vulnerability in /index.php?admin-master-navmenu-add of Chaoji CMS v2.18 that allows attackers to execute arbitrary code...
CVE-2020-18418: Cross-Site Request Forgery (CSRF)
A Cross site request forgery CSRF vulnerability was discovered in FeiFeiCMS v4.1.190209, which allows attackers to create administrator accounts via /index.php?s=Admin-Admin-Insert...
CVE-2020-18414: Improper Neutralization of Input During Web Page Generation
Stored cross site scripting XSS vulnerability in Chaoji CMS v2.18 that allows attackers to execute arbitrary code via /index.php?admin-master-webset...
PT-2023-11498 · Unknown · Chaoji Cms
Name of the Vulnerable Software and Affected Versions: Chaoji CMS version 2.18 Description: A stored cross site scripting XSS issue in the /index.php?admin-master-article-edit endpoint of Chaoji CMS allows attackers to obtain administrator privileges. Recommendations: For Chaoji CMS version 2.18,...
CVE-2023-3396: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes Retro Cellphone Online Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument username/password leads to sql injection. The attack can be launched...
CVE-2020-21489
File Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component...
