CVE-2023-40851: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to run arbitrary code via fname, lname, email, and contact fields of the user registration page...

libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c

A vulnerability was found in Libiberty. A heap and stack buffer overflow found in the dlanglname function in d-demangle.c leads to a denial of service...

SUSE CVE-2021-3826

Heap/stack buffer overflow in the dlanglname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service segmentation fault and crash via a crafted mangled symbol...

DEBIAN-CVE-2021-3826

Heap/stack buffer overflow in the dlanglname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service segmentation fault and crash via a crafted mangled symbol...

CVE-2022-29005

Multiple cross-site scripting XSS vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname or lname parameters...

CVE-2022-29005: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname or lname parameters...

PT-2022-10702 · Libiberty +4 · Libiberty +4

Name of the Vulnerable Software and Affected Versions: libiberty affected versions not specified Description: The issue is related to a heap/stack buffer overflow in the dlang lname function in d-demangle.c, which can potentially cause a denial of service, leading to a segmentation fault and cras...

CVE-2021-32103

A Stored XSS vulnerability in interface/usergroup/usergroupadmin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web script or HTML via the lname parameter...

CVE-2021-32103

A Stored XSS vulnerability in interface/usergroup/usergroupadmin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web script or HTML via the lname parameter...

CVE-2021-32103: Improper Neutralization of Input During Web Page Generation

A Stored XSS vulnerability in interface/usergroup/usergroupadmin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web script or HTML via the lname parameter...

OpenEMR 跨站脚本漏洞

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A stored cross-site scripting vulnerability exists in interface/usergroup/usergroupadmin.php in OpenEMR versions prior to 5.0.2.1. An attacker can exploit this vulnerability to inject arbitrary we...

CVE-2014-6619

Multiple cross-site scripting XSS vulnerabilities in register-exec.php in Restaurant Script PizzaInnProject 1.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 fname, 2 lname, or 3 login parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in register-exec.php in Restaurant Script PizzaInnProject 1.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 fname, 2 lname, or 3 login parameter...

CVE-2011-3686

Multiple cross-site scripting XSS vulnerabilities in myAddressBook.asp in Sonexis ConferenceManager 9.2.11.0 and 9.3.14.0 allow remote attackers to inject arbitrary web script or HTML via the 1 fname, 2 lname, 3 emailedit, 4 email, 5 email2, 6 email3, 7 sms, 8 smsid, or 9 work parameter...

CVE-2008-5954

SQL injection vulnerability in KTP Computer Customer Database KTPCCD CMS, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the lname parameter in a login action to an unspecified component. NOTE: the provenance of this information is unknown; the...

CVE-2008-5954

CVE-2008-5954 describes an SQL injection vulnerability in the KTP Computer Customer Database (KTPCCD) CMS. When magic_quotes_gpc is disabled, remote attackers can inject SQL via the lname parameter in a login action to an unspecified component, potentially compromising data. The available documen...

CVE-2006-6148

Multiple cross-site scripting XSS vulnerabilities in submitlink.asp in JiRos Links Manager allow remote attackers to inject arbitrary web script or HTML via the 1 lName, 2 lURL, 3 lImage, and 4 lDescription parameters. NOTE: some of these details are obtained from third party information...