CVE-2024-22855

CVE-2024-22855 affects ITSS iMLog v1.307 in the User Maintenance section. The vulnerability is a cross-site scripting (XSS) flaw that allows an attacker to inject a crafted payload into the Last Name parameter, enabling arbitrary web scripts or HTML execution. The issue stems from input handling ...

CVE-2024-34224

Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the firstname, middlename, lastname parameters...

PT-2024-25197 · Sourcecodester · Sourcecodester Computer Laboratory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Laboratory Management System version 1.0 Description: The issue is related to Cross Site Scripting XSS via the Last Name parameter in the Create User function. This allows for potential malicious script injection...

CVE-2024-31650

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter...

CVE-2024-31650

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter...

CVE-2024-31650

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter...

CVE-2024-31650

A cross-site scripting XSS in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter...

CVE-2024-31650

CVE-2024-31650 describes a cross-site scripting (XSS) vulnerability in the Cosmetics and Beauty Product Online Store v1.0. The flaw is triggered through a crafted payload in the Last Name parameter, allowing arbitrary web scripts/HTML execution. The NVD entry reports a CVSSv3.1 base score of 9.6 ...

Cosmetics and Beauty Product Online Store 安全漏洞

Cosmetics And Beauty Product Online Store is an online store for cosmetics and beauty products by Carlo Montero, an individual developer. A security vulnerability exists in Cosmetics and Beauty Product Online Store v1.0, which originates from a cross-site scripting vulnerability in the Last Name...

PT-2023-32904 · Unknown · Code-Projects Client Details System

Name of the Vulnerable Software and Affected Versions: code-projects Client Details System version 1.0 Description: A problematic issue was found in the system, affecting some unknown functionality of the file /admin/regester.php. The manipulation of the argument fname, lname, email, or contact...

MonicaHQ 跨站脚本漏洞

MonicaHQ is a relationship management system from MonicaHQ, Inc. A security vulnerability exists in MonicaHQ version 4.0.0, which can be exploited by a remote attacker to execute malicious code in the application via the people:id/relationships endpoint and CSTIs in the firstname and lastname...

SourceCodester Computer Parts Sales and Inventory System 跨站脚本漏洞

Computer Parts Sales and Inventory System is a computer parts sales and inventory system by Warren Daloyan, an individual developer. A cross-site scripting vulnerability exists in SourceCodester Computer Parts Sales and Inventory System version 1.0, which stems from unknown problematic code in th...

SUSE CVE-2012-1006

Multiple cross-site scripting XSS vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 lastName parameter to struts2-showcase/person/editPerson.action, or the 3 clientName parameter to struts2-rest-showcase/orders...

CVE-2022-34991

Paymoney v3.3 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the firstname and lastname parameters...

PT-2022-19359 · Unknown · Online Birth Certificate System

Name of the Vulnerable Software and Affected Versions: Online Birth Certificate System version 1.2 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname or lname parameters in the /obcs/user/profile.php component. This enabl...

Online Birth Certificate System 跨站脚本漏洞

Online Birth Certificate System is an online birth certificate system by the individual developer ANUJ KUMAR. A security vulnerability exists in Online Birth Certificate System version v1.2, which stems from multiple cross-site scripting XSS issues in the component /obcs/user/profile.php. An...

CVE-2021-42869

A Cross Site Scripting XSS vulnerability exists in Chikista Patient Management Software 2.0.2 via the lastname parameter in the 1 patient/insert, 2 patientreport, 3 /appointmentreport, 4 visitreport, and 5 /billdetailreport pages...

CVE-2021-42869

A Cross Site Scripting XSS vulnerability exists in Chikista Patient Management Software 2.0.2 via the lastname parameter in the 1 patient/insert, 2 patientreport, 3 /appointmentreport, 4 visitreport, and 5 /billdetailreport pages...

Cross site scripting

A Cross Site Scripting XSS vulnerability exists in Chikista Patient Management Software 2.0.2 via the lastname parameter in the 1 patient/insert, 2 patientreport, 3 /appointmentreport, 4 visitreport, and 5 /billdetailreport pages...

Chikista Patient Management Software 跨站脚本漏洞

Chikista Patient Management Software is a hospital/clinic management system from Chikista India. A security vulnerability exists in Chikista Patient Management Software 2.0.2, which stems from a cross-site scripting via the lastname parameter in 1 patient/insert, 2 patientreport, 3...