6 matches found
CVE-2024-51222
The Phpgurukul Vehicle Record Management System v1.0 contains a stored cross-site scripting (XSS) vulnerability in the /admin/profile.php component. The root cause is the improper handling, filtering, and escaping of data provided by users through the Name parameter. Attackers can exploit this by...
EUVD-2025-28711
Malicious code in bioql PyPI...
CVE-2025-6288
A vulnerability, which was classified as problematic, has been found in PHPGurukul Bus Pass Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/admin-profile.php of the component Profile Page. The manipulation of the argument profile name leads to cross...
CVE-2019-7677
XSS exists in Enphase Envoy R3.. via the profileName parameter to the /home URI on TCP port 8888...
Heap overflow
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted profile-name parameter in a printer-url...