Lucene search
+L

144 matches found

ATTACKERKB
ATTACKERKB
added 2026/03/30 12:00 a.m.4 views

CVE-2026-30556

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the index.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via...

6AI score0.00252EPSS
SaveExploits1References2
CVE
CVE
added 2026/03/30 12:00 a.m.23 views

CVE-2026-30561

SourceCodester Sales and Inventory System 1.0 is affected by CVE-2026-30561, a reflected XSS in add_purchase.php via the msg parameter. The input is not sanitized, allowing an attacker to craft a URL that injects arbitrary script or HTML. The vulnerability is typified as NETWORK-accessible with u...

6.1CVSS6AI score0.00252EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/30 12:00 a.m.5 views

CVE-2026-30561

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addpurchase.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6AI score0.00252EPSS
SaveExploits1References1
CVE
CVE
added 2026/03/30 12:00 a.m.30 views

CVE-2026-30560

Affected product: SourceCodester Sales and Inventory System 1.0. The CVE-2026-30560/vulnerability is a Reflected Cross-Site Scripting (XSS) in add_supplier.php via the msg parameter, due to inadequate input sanitization. Consequence: attackers can inject arbitrary web script/HTML through a crafte...

6.1CVSS6AI score0.00252EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/30 12:00 a.m.4 views

CVE-2026-30557

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addcategory.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

6AI score0.00252EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/03/27 2:23 p.m.12 views

CVE-2021-27940

resources/public/js/orchestrator.js in openark orchestrator before 3.2.4 allows XSS via the orchestrator-msg parameter...

6.1CVSS5.8AI score0.01245EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/01/07 11:11 p.m.4 views

CVE-2019-25277 FaceSentry Access Control System 6.4.8 Reflected Cross-Site Scripting via pluginInstall.php

FaceSentry Access Control System 6.4.8 contains a cross-site scripting vulnerability in the 'msg' parameter of pluginInstall.php that allows attackers to inject malicious scripts. Attackers can exploit the unvalidated input to execute arbitrary JavaScript in victim browsers, potentially stealing...

6.1CVSS6.4AI score0.00289EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.11 views

Razgover 代码注入漏洞

Razgover is an online messaging application by Eli Nicksic Personal Developer. Razgover suffers from a code injection vulnerability that stems from incorrect manipulation of the parameter msg in the file Chattify/send.php, which could lead to a cross-site scripting attack...

5.1CVSS4.8AI score0.00277EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/12/22 12:00 a.m.5 views

CVE-2024-25814

MyNET up to v26.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the msg parameter...

5.7AI score0.0022EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/12/22 12:00 a.m.36 views

CVE-2024-25814

MyNET up to v26.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the msg parameter...

0.0022EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/12/02 12:19 a.m.18 views

CVE-2025-63526

A cross-site scripting XSS vulnerability exists in the Blood Bank Management System within the abs.php component. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject malicious JavaScript payloads into the msg parameter,...

8.5CVSS5.8AI score0.00328EPSS
SaveExploits1References1
NVD
NVD
added 2025/12/01 3:15 p.m.15 views

CVE-2025-63526

A cross-site scripting XSS vulnerability exists in the Blood Bank Management System within the abs.php component. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject malicious JavaScript payloads into the msg parameter,...

8.5CVSS0.00328EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/12/01 12:00 a.m.18 views

CVE-2025-63526

A cross-site scripting XSS vulnerability exists in the Blood Bank Management System within the abs.php component. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject malicious JavaScript payloads into the msg parameter,...

8.5CVSS0.00328EPSS
SaveExploits1References3
CVE
CVE
added 2025/12/01 12:00 a.m.34 views

CVE-2025-63526

The affected product is the Blood Bank Management System (abs.php). The vulnerability is a cross-site scripting (XSS) flaw caused by improper sanitization/encoding of user input before rendering in the response. An attacker can inject malicious JavaScript into the msg parameter, which is executed...

8.5CVSS5.5AI score0.00328EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2008-1892

Malware in sbrugna...

4.3CVSS6.4AI score0.01022EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2006-3157

Malware in sbrugna...

2.6CVSS6.4AI score0.01293EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2006-5095

Malware in sbrugna...

6.8CVSS6.4AI score0.01251EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2007-2085

Malware in sbrugna...

6.8CVSS6.4AI score0.01665EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2018-8586

Malware in sbrugna...

6.1CVSS6.3AI score0.00818EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-25674

Malware in sbrugna...

6.1CVSS6.2AI score0.00757EPSS
SaveExploits0References3
Rows per page
Query Builder