PT-2022-18426

Name of the Vulnerable Software and Affected Versions Ecommerce-Website version 1.1.0 Description The issue allows attackers to upload a webshell via the Product Image component due to an unrestricted file upload at the "/public/admin/index.php?add product" API endpoint. Recommendations For...

PT-2022-18427

Name of the Vulnerable Software and Affected Versions Ecommerce-Website version 1.1.0 Description A cross-site scripting XSS issue exists in the /public/admin/index.php?add user endpoint, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username...

CVE-2022-27436: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in /public/admin/index.php?adduser at Ecommerce-Website v1.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username text field...

CVE-2021-43478

A vulnerability exists in Hoosk 1.8.0 in /install/index.php, due to a failure to check if config.php already exists in the root directory, which could let a malicious user reinstall the website...

Cross site scripting

A Cross Site Scripting XSS vulnerability exists in DanPros htmly 2.8.1 via the Description field in 1 admin/config, and 2 index.php pages...

CVE-2021-42867

A Cross Site Scripting XSS vulnerability exists in DanPros htmly 2.8.1 via the Description field in 1 admin/config, and 2 index.php pages...

Cross-site Scripting (XSS)

phpLiteAdmin is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of input via the index.php newRows parameter aka num or number...

CVE-2022-1191

SSRF on index.php/cobrowse/proxycss/ in GitHub repository livehelperchat/livehelperchat prior to 3.96...

CVE-2021-42867: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS vulnerability exists in DanPros htmly 2.8.1 via the Description field in 1 admin/config, and 2 index.php pages...

Sourcecodester Student Attendance Management System跨站脚本漏洞

Sourcecodester Student Attendance Management System is an attendance management system used to maintain daily attendance records. A cross-site scripting vulnerability exists in Sourcecodester Student Attendance Management System version 1.0. The vulnerability stems from a lack of data validation...

CVE-2021-43478: Undefined Security Weakness

A vulnerability exists in Hoosk 1.8.0 in /install/index.php, due to a failure to check if config.php already exists in the root directory, which could let a malicious user reinstall the website...

PT-2022-11853

Name of the Vulnerable Software and Affected Versions Hoosk version 1.8.0 Description A vulnerability exists due to a failure to check if config.php already exists in the root directory, which could let a malicious user reinstall the website. This issue is related to the /install/index.php...

CVE-2022-1191: Server-Side Request Forgery (SSRF)

SSRF on index.php/cobrowse/proxycss/ in GitHub repository livehelperchat/livehelperchat prior to 3.96...

PT-2022-11719

Name of the Vulnerable Software and Affected Versions DanPros htmly version 2.8.1 Description A Cross Site Scripting XSS issue exists via the Description field in the "admin/config" and "index.php" pages. Recommendations For DanPros htmly version 2.8.1, consider restricting access to the...

Cross-Site Scripting (XSS)

nilsteampassnet/teampass is vulnerable to reflected cross-site scripting. The vulnerability exists in index.php due to improper sanitization which allows an attacker to inject and execute arbitrary scripts...

CVE-2021-45866

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...

CVE-2021-45866

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...

Cross site scripting

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...

CVE-2021-45866

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...

Cross-site Scripting in teampass

Teampass 2.1.26 allows reflected XSS via the index.php PATHINFO. Someone must open a link for the Teampass Password Manager index page containing malicious payload...