36 matches found
Vehicle Record Management System profile.php file cross-site scripting vulnerability
Vehicle Record Management System is a vehicle record management system. Vehicle Record Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the name, email, and mobile parameters in...
CVE-2025-44183
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting XSS in /admin/profile.php via the name, email, and mobile parameters...
CVE-2025-44183
The Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross-Site Scripting (XSS) in the /admin/profile.php endpoint. The root cause is the lack of effective filtering and escaping of user-supplied data provided via the name, email, and mobile parameters. An attacker can exploit th...
PHPGurukul Vehicle Record Management System security vulnerabilities
Vehicle Record Management System is a vehicle record management system. Vehicle Record Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the name, email, and mobile parameters in...
PHPGurukul Preschool Enrollment System Injection Vulnerability
PHPGurukul Pre-School Enrollment System is a web-based preschool enrollment system from PHPGurukul, Inc. An injection vulnerability exists in version 1.0 of the PHPGurukul Pre-School Enrollment System that stems from improper manipulation of the fullname/emailid/mobileNumber parameters, which cou...
PT-2024-5174 · Unknown · Tailoring Management System
Name of the Vulnerable Software and Affected Versions: Tailoring Management System version 1.0 Description: A critical issue has been identified in the Tailoring Management System, affecting the setgeneral.php file. This issue is related to the lack of protection against SQL query structure...
CVE-2024-3542
Campcodes Church Management System 1.0 contains a cross-site scripting vulnerability in /admin/add_visitor.php, triggered by the mobile parameter. Description indicates remote initiation and publicly disclosed exploit; CVSS metrics cite MEDIUM impact overall (NVD 6.1). Connected sources corrobora...
PT-2024-26488 · Unknown · Campcodes Church Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Church Management System version 1.0 Description: A problematic vulnerability was found in the system, affecting unknown code of the file /admin/add visitor.php. The manipulation of the mobile argument leads to cross-site scripting...
Church Management System Cross-site Scripting Vulnerability
Church Management System is a church management system. A cross-site scripting vulnerability exists in version 1.0 of the Church Management System, which stems from a cross-site scripting vulnerability in the mobile parameter of the /admin/addvisitor.php file...
CVE-2024-22494
A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter, which allows remote attackers to inject arbitrary web script or HTML...
CVE-2024-22494: Improper Neutralization of Input During Web Page Generation
A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter, which allows remote attackers to inject arbitrary web script or HTML...
JFinalCMS Cross-Site Scripting Vulnerability
JFinalCMS is a content management system by heyewei personal developer. A cross-site scripting vulnerability exists in JFinalCMS version 5.0.0, which originates from cross-site scripting via the /gusetbook/save mobile parameter, allowing remote attackers to inject arbitrary web script or HTML...
PT-2024-19451 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinalcms version 5.0.0 Description: A stored XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the "/gusetbook/save" API endpoint, specifically through the mobile parameter. This enables attackers to...
CVE-2024-22494
A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter, which allows remote attackers to inject arbitrary web script or HTML...
PT-2023-17377 · Unknown · Phpgurukul Bank Locker Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Bank Locker Management System version 1.0 Description: A critical issue has been found in the Password Reset component of the PHPGurukul Bank Locker Management System. The problem lies in an unknown function of the file recovery.ph...
