7 matches found
CVE-2025-6134: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /insertClient.php. The manipulation of the argument clientid leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2024-36599
A cross-site scripting XSS vulnerability in Aegon Life v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter at insertClient.php...
CVE-2024-36599
A cross-site scripting XSS vulnerability in Aegon Life v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter at insertClient.php...
CVE-2024-36599
A cross-site scripting XSS vulnerability in Aegon Life v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter at insertClient.php...
CVE-2024-36599
CVE-2024-36599 describes a stored XSS vulnerability in Aegon Life v1.0 where an attacker can inject arbitrary scripts via the name parameter in insertClient.php. Affected software: Aegon Life Life Insurance Management System (v1.0). Root cause: insufficient input validation/output encoding in the...
CVE-2024-36599: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Aegon Life v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter at insertClient.php...
PT-2024-27090
Name of the Vulnerable Software and Affected Versions Aegon Life version 1.0 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter at "insertClient.php". Recommendations For Aegon Life version...