CVE-2021-37389

Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter...

CVE-2021-37389: Improper Neutralization of Input During Web Page Generation

Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter...

PT-2021-21629

Name of the Vulnerable Software and Affected Versions Chamilo version 1.11.14 Description The issue allows stored XSS via "main/install/index.php" and "main/install/ajax.php" through the port parameter. Recommendations For Chamilo version 1.11.14, as a temporary workaround, consider restricting...

CVE-2021-38149

index.php/admin/adduser in Chikitsa Patient Management System 2.0.0 allows XSS...

Cross site scripting

index.php/admin/adduser in Chikitsa Patient Management System 2.0.0 allows XSS...

Cross site scripting

index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS...

CVE-2021-38149

index.php/admin/adduser in Chikitsa Patient Management System 2.0.0 allows XSS...

CVE-2021-38151: Improper Neutralization of Input During Web Page Generation

index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS...

CVE-2021-38152: Improper Neutralization of Input During Web Page Generation

index.php/appointment/insertpatientaddappointment in Chikitsa Patient Management System 2.0.0 allows XSS...

CVE-2021-38149: Improper Neutralization of Input During Web Page Generation

index.php/admin/adduser in Chikitsa Patient Management System 2.0.0 allows XSS...

CVE-2020-19304: Improper Limitation of a Pathname to a Restricted Directory

An issue in /admin/index.php?n=system&c=filept&a=doGetFileList of Metinfo v7.0.0 allows attackers to perform a directory traversal and access sensitive information...

PT-2021-10339

Name of the Vulnerable Software and Affected Versions: Metinfo version 7.0.0 Description: The issue allows attackers to perform a directory traversal and access sensitive information through the /admin/index.php?n=system&c=filept&a=doGetFileList endpoint. Recommendations: For Metinfo version 7.0....

CVE-2020-21806

SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php...

CVE-2020-18157

Cross Site Request Forgery CSRF vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php...

CVE-2020-18158

Cross Site Scripting XSS vulnerability in HuCart 5.7.4 via nickname in index.php...

Sql injection

SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php...

Cross site scripting

Cross Site Scripting XSS vulnerability in HuCart 5.7.4 via nickname in index.php...

Sql injection

SQL Injextion vulnerability exists in Whatsns 4.0 via the ip parameter in index.php?adminbanned/add.htm...

HuCart Cross-Site Scripting Vulnerability

HuCart HuCart is a PHP Mysql-based free open source enterprise website system. HuCart 5.7.4 has a cross-site scripting vulnerability, which can be exploited by attackers to conduct cross-site scripting attacks via the nickname in index.php...

CVE-2020-18158

Technical details about CVE-2020-18158 are not publicly provided in the supplied documents. No confirmed affected versions or fixes are listed here. Monitor for updates from vendors and security advisories.