CVE-2022-23363

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via index.php...

CVE-2022-23363: Improper Neutralization of Special Elements used in an SQL Command

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via index.php...

PT-2022-15953

Name of the Vulnerable Software and Affected Versions Online Banking System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the index.php file. Recommendations For Online Banking System version 1.0, consider restricting access to the index.ph...

CVE-2021-44584

Cross-site scripting XSS vulnerability in index.php in emlog version = pro-1.0.7 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

PT-2022-12175

Name of the Vulnerable Software and Affected Versions emlog versions pro-1.0.7 and earlier Description The issue is a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the s parameter in the index.php file. This can be exploited by...

CVE-2021-44584: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in emlog version = pro-1.0.7 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2020-20946

CVE-2020-20946 affects Qibosoft v7 (CMS) with a stored XSS vulnerability in the admin path /admin/index.php?lfj=friendlink&action=add. The root cause is input data not validated in the friendlink/add handler, enabling injected client-side script execution. CVSS metrics indicate a Low to Medium ov...

CVE-2020-20946: Improper Neutralization of Input During Web Page Generation

Qibosoft v7 contains a stored cross-site scripting XSS vulnerability in the component /admin/index.php?lfj=friendlink&action=add...

CVE-2020-20945: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in /admin/index.php?lfj=member&action=editmember of Qibosoft v7 allows attackers to arbitrarily add administrator accounts...

PT-2021-10558

Name of the Vulnerable Software and Affected Versions: Qibosoft version 7 Description: The issue is related to a stored cross-site scripting XSS vulnerability. It affects the /admin/index.php?lfj=friendlink&action=add endpoint. Recommendations: For Qibosoft version 7, update the software to a...

PT-2021-10557

Name of the Vulnerable Software and Affected Versions: Qibosoft version 7 Description: A Cross-Site Request Forgery CSRF issue exists in the /admin/index.php?lfj=member&action=editmember endpoint of Qibosoft, allowing attackers to add administrator accounts arbitrarily. Recommendations: For...

CVE-2020-20944: Improper Limitation of a Pathname to a Restricted Directory

An issue in /admin/index.php?lfj=mysql&action=del of Qibosoft v7 allows attackers to arbitrarily delete files...

CVE-2021-45018: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in Catfish =6.3.0 via a Google search in url:/catfishcms/index.php/admin/Index/addmenu.htmland then the .html file on the website that uses this editor the file suffix is allowed...

CVE-2021-44966

SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php. An attacker can log in as an admin account of this system and can destroy, change or manipulate all sensitive information on the system...

CVE-2021-44966

SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php. An attacker can log in as an admin account of this system and can destroy, change or manipulate all sensitive information on the system...

PT-2021-24187 · Unknown · Phpgurukul Employee Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Employee Record Management System version 1.2 Description: The issue allows an attacker to bypass authentication via SQL injection in the index.php file, potentially granting access to an admin account. This could enable the attack...

CVE-2021-44966: Improper Neutralization of Special Elements used in an SQL Command

SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php. An attacker can log in as an admin account of this system and can destroy, change or manipulate all sensitive information on the system...

Phpgurukul Employee Record Management System SQL注入漏洞

Employee Record Management System is an employee record management system. Employee Record Management System has a SQL injection vulnerability that originates from an SQL injection bypass authentication vulnerability via index.php, which can be exploited by an attacker to corrupt, alter, or...

CVE-2020-22421: Improper Neutralization of Input During Web Page Generation

74CMS v6.0.4 was discovered to contain a cross-site scripting XSS vulnerability via /index.php?m=&c=help&a=helplist&key...

PT-2021-10762

Name of the Vulnerable Software and Affected Versions 74CMS version 6.0.4 Description A cross-site scripting XSS issue was found in 74CMS. The issue is related to the /index.php?m=&c=help&a=help list&key endpoint. This allows for potential XSS attacks. Recommendations For 74CMS version 6.0.4, as ...