5 matches found
CVE-2021-28000
A persistent cross-site scripting vulnerability was discovered in Local Services Search Engine Management System Project 1.0 which allows remote attackers to execute arbitrary code via crafted payloads entered into the Name and Address fields...
CVE-2021-28000: Improper Neutralization of Input During Web Page Generation
A persistent cross-site scripting vulnerability was discovered in Local Services Search Engine Management System Project 1.0 which allows remote attackers to execute arbitrary code via crafted payloads entered into the Name and Address fields...
PT-2021-17705
Name of the Vulnerable Software and Affected Versions: Local Services Search Engine Management System Project version 1.0 Description: A SQL injection vulnerability was discovered in the editid parameter. This issue allows admin users to dump all data from the database. Recommendations: For Local...
PT-2021-17706
Name of the Vulnerable Software and Affected Versions: Local Services Search Engine Management System Project version 1.0 Description: A persistent cross-site scripting issue was discovered, allowing remote attackers to execute arbitrary code via crafted payloads entered into the Name and Address...
CVE-2021-27999: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability was discovered in the editid parameter in Local Services Search Engine Management System Project 1.0. This vulnerability gives admin users the ability to dump all data from the database...