Lucene search
+L

184 matches found

CNVD
CNVD
added 2024/12/20 12:0 a.m.4 views

Beauty Parlour Management System Cross-Site Scripting Vulnerability

Beauty Parlour Management System is a software system for standardizing salon business processes and improving management efficiency. A cross-site scripting vulnerability exists in Beauty Parlour Management System. The vulnerability stems from the injection of arbitrary HTML into the Firstname an...

6.1CVSS6.5AI score0.00485EPSS
SaveExploits1References1
OSV
OSV
added 2024/12/10 8:15 p.m.6 views

CVE-2024-53481

A Cross Site Scripting XSS vulnerability in the profile.php of PHPGurukul Beauty Parlour Management System v1.1 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "Firstname" and "Last name" parameters...

6.1CVSS6.1AI score0.00485EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/12/10 12:0 a.m.4 views

PHPGurukul Beauty Parlour Management System 安全漏洞

Beauty Parlour Management System is a software system for standardizing salon business processes and improving management efficiency. A cross-site scripting vulnerability exists in Beauty Parlour Management System. The vulnerability stems from the injection of arbitrary HTML into the Firstname an...

6.1CVSS6.4AI score0.00485EPSS
SaveExploits1References2
OSV
OSV
added 2024/12/09 7:15 p.m.4 views

CVE-2024-54921

A SQL Injection was found in /studentsignup.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the username, firstname, lastname, and classid parameters...

9.8CVSS6.1AI score0.00583EPSS
SaveExploits1References1
OSV
OSV
added 2024/12/09 6:15 p.m.6 views

CVE-2024-54922

A SQL Injection was found in /admin/edituser.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the firstname, lastname, and username parameters...

7.2CVSS6.1AI score0.00562EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.7 views

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System v1.0. An attacker can exploit the vulnerability to access the database by executing arbitrary SQL commands via the firstname, lastname,...

9.8CVSS7.6AI score0.00582EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:0 a.m.7 views

PT-2024-36438 · Unknown · Kashipara E-Learning Management System

Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System version 1.0 Description: A SQL injection issue was found in the /teacher signup.php file, allowing remote attackers to execute arbitrary SQL commands and gain unauthorized access to the database through...

9.8CVSS9.3AI score0.00582EPSS
SaveExploits1References5
OSV
OSV
added 2024/11/14 5:15 p.m.10 views

CVE-2024-50836

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and lastname parameters...

4.8CVSS6AI score0.00548EPSS
SaveExploits1References1
OSV
OSV
added 2024/11/14 5:15 p.m.5 views

CVE-2024-50834

A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters...

7.2CVSS5.8AI score0.0058EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/11/14 12:0 a.m.5 views

PT-2024-34432 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A SQL Injection issue was discovered in the /admin/teachers.php file of the KASHIPARA E-learning Management System Project. The firstname and lastname parameters are...

7.2CVSS8.1AI score0.0058EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2024/11/14 12:0 a.m.15 views

CVE-2024-50834

A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters...

8.2AI score0.0058EPSS
SaveExploits1References1
CVE
CVE
added 2024/11/14 12:0 a.m.54 views

CVE-2024-50834

The CVE-2024-50834 issue affects KASHIPARA E-learning Management System Project 1.0. A SQL Injection vulnerability exists in /admin/teachers.php exploitable via the firstname and lastname parameters, as documented by multiple sources. Root cause: improper handling of user-supplied input in these ...

7.2CVSS8.2AI score0.0058EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/14 12:0 a.m.15 views

PT-2024-34434 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A Stored Cross-Site Scripting XSS issue was discovered in the /admin/teachers.php endpoint, allowing remote attackers to execute arbitrary scripts via the firstname and...

5.4CVSS6.1AI score0.00548EPSS
SaveExploits1References4
NVD
NVD
added 2024/11/13 8:15 p.m.37 views

CVE-2024-42834

A stored cross-site scripting XSS vulnerability in the Create Customer API in Incognito Service Activation Center SAC UI v14.11 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the lastName parameter...

5.4CVSS0.00466EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/13 12:0 a.m.107 views

CVE-2024-42834

The CVE-2024-42834 issue is a stored XSS in the Create Customer API of Incognito Service Activation Center (SAC) UI v14.11. An authenticated attacker can inject a crafted payload via the lastName parameter to execute arbitrary web scripts or HTML. Details across Red Hat, NVD, CNNVD, CIRCL and rel...

5.4CVSS5.5AI score0.00466EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/09/20 12:0 a.m.3 views

SourceCodester Best House Rental Management System SQL注入漏洞

SourceCodester Best House Rental Management System is a house rental management system from SourceCodester. A SQL injection vulnerability exists in SourceCodester Best House Rental Management System version 1.0, which is caused by SQL injection of the parameters firstname/lastname/email...

9.8CVSS7.9AI score0.00698EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/09/20 12:0 a.m.3 views

SourceCodester Best House Rental Management System 安全漏洞

SourceCodester Best House Rental Management System is a house rental management system from SourceCodester, Inc. A security vulnerability exists in SourceCodester Best House Rental Management System version 1.0, which is caused by an SQL injection in the parameters firstname/lastname/email...

8.8CVSS7AI score0.00614EPSS
SaveExploits1References6
OSV
OSV
added 2024/08/15 3:15 a.m.6 views

CVE-2024-7812

A vulnerability classified as problematic was found in SourceCodester Best House Rental Management System 1.0. This vulnerability affects unknown code of the file /rental0/rental/ajax.php?action=savetenant of the component POST Parameter Handler. The manipulation of the argument lastname leads to...

5.4CVSS3.9AI score0.00439EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/08/15 12:0 a.m.6 views

SourceCodester Best House Rental Management System 跨站脚本漏洞

SourceCodester Best House Rental Management System is a house rental management system from SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Best House Rental Management System version 1.0, which originates from a cross-site scripting vulnerability in the lastnam...

5.4CVSS4.6AI score0.00439EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/08/15 12:0 a.m.9 views

PT-2024-38599 · Sourcecodester · Sourcecodester Best House Rental Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best House Rental Management System version 1.0 Description: A problematic vulnerability was found in the SourceCodester Best House Rental Management System. This issue affects the file /rental 0/rental/ajax.php?action=save...

5.4CVSS4.2AI score0.00439EPSS
SaveExploits1References9
Rows per page
Query Builder