Lucene search
K

22 matches found

NVD
NVD
added 2026/02/26 4:23 p.m.5 views

CVE-2025-56605

A reflected Cross-Site Scripting XSS vulnerability exists in the register.php backend script of PuneethReddyHC Event Management System 1.0. The mobile POST parameter is improperly validated and echoed back in the HTTP response without sanitization, allowing an attacker to inject and execute...

5.4CVSS0.0002EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/19 12:0 a.m.3 views

itsourcecode Event Management System SQL注入漏洞

itsourcecode Event Management System is an open-source event management system developed by itsourcecode. Version 1.0 of the itsourcecode Event Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter ID in the...

9.8CVSS7.2AI score0.00015EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/11/16 7:32 a.m.6 views

CVE-2025-13242 code-projects Student Information System register.php sql injection

A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be...

7.5CVSS0.00028EPSS
Exploits1References5
CVE
CVE
added 2025/10/27 7:32 a.m.6 views

CVE-2025-12244

The CVE-2025-12244 entry affects Code-Projects Simple E-Banking System 1.0. The vulnerable component is the file /eBank/register.php, where manipulation of the Username argument can trigger cross-site scripting. The issue is exploitable remotely and an exploit has been publicly disclosed. While m...

6.1CVSS5.3AI score0.00038EPSS
Exploits1References5Affected Software1
EUVD
EUVD
added 2025/10/08 2:32 p.m.2 views

EUVD-2025-33308

A vulnerability was detected in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /register.php. Performing manipulation of the argument registerusername results in sql injection. The attack is possible to be carried out remotely. The exploit ...

7.5CVSS6.5AI score0.00042EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-14725

Malware in sbrugna...

6.1CVSS6.3AI score0.0019EPSS
Exploits1References2
NVD
NVD
added 2025/09/17 5:15 p.m.1 views

CVE-2025-10600

A flaw has been found in SourceCodester Online Exam Form Submission 1.0. This impacts an unknown function of the file /register.php. This manipulation of the argument img causes unrestricted upload. It is possible to initiate the attack remotely. The exploit has been published and may be used...

9.8CVSS0.00116EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/09/17 12:0 a.m.2 views

PT-2025-38224

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam Form Submission version 1.0 Description: A flaw exists in SourceCodester Online Exam Form Submission that allows for unrestricted file upload. The issue is related to the manipulation of the img argument within the...

7.5CVSS7.1AI score0.00116EPSS
Exploits1References8
NVD
NVD
added 2025/09/04 10:42 a.m.9 views

CVE-2025-9941

A flaw has been found in CodeAstro Real Estate Management System 1.0. This impacts an unknown function of the file /register.php. Executing manipulation of the argument uimage can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be used...

8.8CVSS0.00092EPSS
Exploits1References5
CVE
CVE
added 2025/08/28 12:0 a.m.11 views

CVE-2025-51971

CVE-2025-51971 affects PuneethReddyHC Online Shopping System Advanced 1.0. A reflected XSS exists in register.php due to unsanitized input in the f_name parameter being reflected in the response, allowing remote JavaScript injection. Impact is reflected, client-side HTML encoding/output escaping ...

5.4CVSS5.5AI score0.00067EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2025/07/30 9:15 p.m.1 views

CVE-2025-8332

A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown function of the file /register.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.8AI score0.00204EPSS
Exploits1References5
OSV
OSV
added 2025/06/05 10:15 a.m.1 views

CVE-2025-5650

A vulnerability classified as critical was found in 1000projects Online Notice Board 1.0. This vulnerability affects unknown code of the file /register.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

9.8CVSS5.8AI score
Exploits0References4
OSV
OSV
added 2025/06/01 9:15 p.m.0 views

CVE-2025-5407

A vulnerability has been found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /registerscript.php. The manipulation of the argument fullname leads to cross site scriptin...

5.4CVSS3.6AI score0.00145EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/06/01 12:0 a.m.2 views

Blogbook 代码注入漏洞

Blogbook is a content management system project by the individual developer Chaitak Gorai. A code injection vulnerability exists in Blogbook 92f5cf90f8a7e6566b576fe0952e14e1c6736513 and prior versions, which originates from a cross-site scripting attack on the parameter fullname in the file...

5.4CVSS4.3AI score0.00145EPSS
Exploits1References6
OSV
OSV
added 2024/11/26 9:15 p.m.0 views

CVE-2024-11744

A vulnerability has been found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely...

9.8CVSS5.8AI score0.00053EPSS
Exploits1References5
OSV
OSV
added 2024/11/11 8:15 p.m.1 views

CVE-2024-11078

A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument e/role leads to cross site scripting. The attack can be launched remotely. The...

5.4CVSS3.8AI score
Exploits0References5
OSV
OSV
added 2024/10/10 5:15 p.m.1 views

CVE-2024-9797

A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file register.php. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

7.5CVSS6.8AI score
Exploits0References5
CNNVD
CNNVD
added 2024/04/07 12:0 a.m.1 views

PuneethReddyHC Event Management SQL注入漏洞

PuneethReddyHC Event Management is an application by Puneeth Reddy H C Individual Developer. Helps users to register for events organized in university festivals with simple logic and security. A SQL injection vulnerability exists in PuneethReddyHC Event Management version 1.0, which originates...

8.8CVSS6.2AI score0.00097EPSS
Exploits1References4
OSV
OSV
added 2007/09/26 10:17 p.m.2 views

DEBIAN-CVE-2007-5105

Cross-site scripting XSS vulnerability in wp-register.php in WordPress 2.0 and 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the useremail parameter...

4.3CVSS6AI score0.01749EPSS
Exploits0References1
NVD
NVD
added 2007/03/02 9:18 p.m.10 views

CVE-2006-7078

Multiple cross-site scripting XSS vulnerabilities in Professional Home Page Tools Login Script, as of July 2006, allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 vorname, and 3 nachname parameters in the register script. NOTE: some details have been obtained from...

4.3CVSS6AI score0.00527EPSS
Exploits0References6
Rows per page
Query Builder