Attendance and Payroll System SQL注入漏洞（CNVD-2022-33146）

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system from oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component admindeductionedit.php lacks validation for external inpu...

Attendance and Payroll System SQL注入漏洞（CNVD-2022-33136）

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system from oretnom23 individual developers. sql injection vulnerability exists in Attendance and Payroll System, which can be exploited by remote attackers to submit special SQL requests to manipulate database, whic...

Attendance and Payroll System SQL注入漏洞（CNVD-2022-33137）

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system from oretnom23 individual developers. v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminschedule employeeedit.php lacks validation of external input...

Attendance and Payroll System SQL注入漏洞（CNVD-2022-33148）

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system by oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component admincashadvancedelete.php lacks validation for external...

Sourcecodester Attendance and Payroll System远程代码执行漏洞

Attendance and Payroll System is an attendance and payroll system using PHP/MySQLi source code by oretnom23 individual developers. sourcecodester Attendance and Payroll System is vulnerable to remote code execution, which can be exploited by attackers to upload maliciously crafted PHP...

Sourcecodester Attendance and Payroll System SQL注入漏洞

Attendance and Payroll System is an attendance and payroll system using PHP/MySQLi source code from oretnom23 individual developers. sourcecodester Attendance and Payroll System is vulnerable to SQL injection, which can be exploited by remote attackers to bypass authentication via unprocessed log...

Local Service Search Engine Management System SQL Injection Vulnerability

Local Service Search Engine Management System is a simple PHP/MySQLi project. SQL injection vulnerability exists in Local Service Search Engine Management System 1.0, which stems from a failure to properly validate input information and can be exploited to bypass the login page and gain backend...

Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi跨站脚本漏洞

Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi is an online ordering system for Gadget Works developed using PHP/MySQLi. The main goal of this online ordering system is to improve customer convenience. Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 is...

CVE-2021-34073

A Cross Site Scripting XSS vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php...

Cross site scripting

A Cross Site Scripting XSS vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php...

CVE-2021-34073

A Cross Site Scripting XSS vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php...

CVE-2021-34073

CVE-2021-34073 affects the Sourcecodester Gadget Works Online Ordering System (PHP/MySQLi 1.0). The vulnerability is a Cross Site Scripting (XSS) that originates in the category/index.php add function, exploiting the Category parameter. The connected documents consistently describe this XSS witho...

CVE-2021-34073: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php...

Online Enrollment Management System 1.0 SQL Injection

Exploit Title: Online Enrollment Management System 1.0 - Authentication Bypass Date: 07.10.2021 Exploit Author: Amine ismail @aminei Vendor Homepage: https://www.sourcecodester.com/php/12914/online-enrollment-management-system-paypal-payments-phpmysqli.html Software Link:...

GHSA-X2GW-85W6-FJJW Cross-site scripting in demos/demo.mysqli.php in getID3

Cross-site scripting XSS vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter...

Cross-site scripting in demos/demo.mysqli.php in getID3

Cross-site scripting XSS vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter...

SourceCodester Theme Park Ticketing System SQL Injection Vulnerability

SourceCodester Theme Park Ticketing System is a software application. A simple PHP/MySQLi project that helps to manage and generate tickets for theme park or amusement park visitors. SourceCodester Theme Park Ticketing System suffers from a SQL injection vulnerability that stems from a lack of...

SourceCodester Content Management System Cross-Site Scripting Vulnerability

SourceCodester Content Management System is an application. A simple PHP/library MySQLi to manage content items for a simple website. sourceCodester Content Management System has a security vulnerability that can be exploited by remote attackers to inject arbitrary web scripts or HTML...

CVE-2021-29625

Adminer is open-source database management software. A cross-site scripting vulnerability in Adminer versions 4.6.1 to 4.8.0 affects users of MySQL, MariaDB, PgSQL and SQLite. XSS is in most cases prevented by strict CSP in all modern browsers. The only exception is when Adminer is using a pdo...

Cross site scripting

Adminer is open-source database management software. A cross-site scripting vulnerability in Adminer versions 4.6.1 to 4.8.0 affects users of MySQL, MariaDB, PgSQL and SQLite. XSS is in most cases prevented by strict CSP in all modern browsers. The only exception is when Adminer is using a pdo...