CVE-2023-23021

Cross Site Scripting XSS vulnerability in sourcecodester oretnom23 pos point sale system 1.0, allows attackers to execute arbitrary code via the code, name, and description inputs in file Main.php...

CVE-2023-23022

Cross site scripting XSS vulnerability in sourcecodester oretnom23 employee's payroll management system 1.0, allows attackers to execute arbitrary code via the code, title, fromdate and todate inputs in file Main.php...

CVE-2023-23019

Cross site scripting XSS vulnerability in file main.php in sourcecodester oretnom23 Blog Site 1.0 via the name and email parameters to function useradd....

PT-2024-11983 · Unknown · Sourcecodester Oretnom23 Employee'S Payroll Management System

Name of the Vulnerable Software and Affected Versions: sourcecodester oretnom23 employee's payroll management system version 1.0 Description: The issue allows attackers to execute arbitrary code via the code, title, from date, and to date inputs in the file Main.php. This is a Cross Site Scriptin...

CVE-2023-23019

Cross site scripting XSS vulnerability in file main.php in sourcecodester oretnom23 Blog Site 1.0 via the name and email parameters to function useradd....

CVE-2023-23022

CVE-2023-23022 is an XSS vulnerability in sourcecodester Oretnom23 Employee's Payroll Management System 1.0. The flaw resides in Main.php and allows crafting input in the fields code, title, from_date, and to_date to trigger arbitrary code execution via the web interface. The issue is confirmed a...

CVE-2023-23021

Cross Site Scripting XSS vulnerability in sourcecodester oretnom23 pos point sale system 1.0, allows attackers to execute arbitrary code via the code, name, and description inputs in file Main.php...

CVE-2023-23021

Cross Site Scripting XSS vulnerability in sourcecodester oretnom23 pos point sale system 1.0, allows attackers to execute arbitrary code via the code, name, and description inputs in file Main.php...

CVE-2023-23019

Cross site scripting XSS vulnerability in file main.php in sourcecodester oretnom23 Blog Site 1.0 via the name and email parameters to function useradd....

CVE-2023-23022: Improper Neutralization of Input During Web Page Generation

Cross site scripting XSS vulnerability in sourcecodester oretnom23 employee's payroll management system 1.0, allows attackers to execute arbitrary code via the code, title, fromdate and todate inputs in file Main.php...

CVE-2023-23021

CVE-2023-23021 describes a Cross Site Scripting (XSS) vulnerability in the sourcecodester Oretnom23 POS Point of Sale System v1.0. The issue arises from unsafely handling user-supplied input in the file Main.php through the fields code , name , and description , enabling an attacker to inject arb...

CVE-2023-23022

Cross site scripting XSS vulnerability in sourcecodester oretnom23 employee's payroll management system 1.0, allows attackers to execute arbitrary code via the code, title, fromdate and todate inputs in file Main.php...

CVE-2023-23022

Cross site scripting XSS vulnerability in sourcecodester oretnom23 employee's payroll management system 1.0, allows attackers to execute arbitrary code via the code, title, fromdate and todate inputs in file Main.php...

CVE-2023-23019: Improper Neutralization of Input During Web Page Generation

Cross site scripting XSS vulnerability in file main.php in sourcecodester oretnom23 Blog Site 1.0 via the name and email parameters to function useradd....

CVE-2023-23021: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in sourcecodester oretnom23 pos point sale system 1.0, allows attackers to execute arbitrary code via the code, name, and description inputs in file Main.php...

PT-2024-22953 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross Site Scripting issue allows a local attacker to execute arbitrary code by sending a crafted payload to the "stepselect main.php" component. Recommendations: For DedeCMS version 5.7, at the moment, ther...

CVE-2023-49489: Improper Neutralization of Input During Web Page Generation

Reflective Cross Site Scripting XSS vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via the APPHOST parameter at config/i18n/en/main.php...

CVE-2015-10051

A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displayallreplies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as...

Sql injection

A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displayallreplies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as...

CVE-2015-10051 bony2023 Discussion-Board main.php display_all_replies sql injection

A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displayallreplies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as...