CVE-2022-2646: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Online Admission System. Affected is an unknown function of the file index.php. The manipulation of the argument eid with the input 8 leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2022-34580

CVE-2022-34580 affects Advanced School Management System v1.0. The issue is a cross-site scripting (XSS) vulnerability exploitable via the address parameter at ip/school/index.php. Documented CVSS: 4.8 (MEDIUM) with network attack vector, high privileges required and user interaction. APT/Exploit...

CVE-2022-34580: Improper Neutralization of Input During Web Page Generation

Advanced School Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the address parameter at ip/school/index.php...

CVE-2022-34611: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac " text field...

CVE-2022-34140: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in /index.php?r=site%2Fsignup of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username field...

PT-2022-16982

Name of the Vulnerable Software and Affected Versions SourceCodester Library Management System version 1.0 Description A critical issue affects the processing of the file /index.php. The manipulation of the argument RollNo with a specific input leads to sql injection. The attack can be initiated...

CVE-2022-2492: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Library Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /index.php. The manipulation of the argument RollNo with the input admin' AND SELECT 2625 FROM SELECTSLEEP5MdIL AND...

CVE-2017-20126 KB Affiliate Referral Script index.php sql injection

A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. It is possible to initiate the attack remotely...

CVE-2017-20126 KB Affiliate Referral Script index.php sql injection

A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. It is possible to initiate the attack remotely...

PT-2022-7993

Name of the Vulnerable Software and Affected Versions KB Affiliate Referral Script version 1.0 Description A critical issue has been found in the software, affecting an unknown part of the file /index.php. The manipulation of the username and password arguments with the input 'or''=' leads to SQL...

CVE-2017-20126: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. It is possible to initiate the attack remotely...

CVE-2022-2293: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Simple Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /cissms/index.php/orders/create. The manipulation of the argument customername with the input leads to cross site...

Cross-Site Request Forgery (CSRF)

microweber/microweber is vulnerable to cross site request forgery. The vulnerability exists due to a dom XSS in index.php because the user input for type parameter is not properly escaped which allows an attacker to steal tokens and gain access to sensitive information resulting a csrf...

CVE-2022-32055

Inout Homestay v2.2 was discovered to contain a SQL injection vulnerability via the guests parameter at /index.php?page=search/rentals...

PT-2022-21080

Name of the Vulnerable Software and Affected Versions Inout Homestay version 2.2 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the guests parameter at the "/index.php?page=search/rentals" API endpoint. Recommendations For Inout Homestay...

CVE-2022-31856

Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemeznewsletteremail parameter at /index.php...

CVE-2022-31856

CVE-2022-31856 affects Newsletter Module v3.x with a SQL injection in the zemez_newsletter_email parameter at /index.php. Root cause is improper handling of this input, enabling unauthenticated network-exposed injection with high/critical impact on confidentiality, integrity, and availability (CV...

CVE-2022-31856: Improper Neutralization of Special Elements used in an SQL Command

Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemeznewsletteremail parameter at /index.php...

CVE-2022-33116

An issue in the jmpath variable in /modules/mindmap/index.php of GUnet Open eClass Platform aka openeclass v3.12.4 and below allows attackers to read arbitrary files via a directory traversal...

PT-2022-21697

Name of the Vulnerable Software and Affected Versions GUnet Open eClass Platform versions 3.12.4 and below Description An issue in the jmpath variable in the "/modules/mindmap/index.php" endpoint of GUnet Open eClass Platform allows attackers to read arbitrary files via a directory traversal...