Moodle cross-site request forgery (CSRF) vulnerability

Cross-site request forgery CSRF vulnerability in admin/registration/register.php in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote attackers to hijack the authentication of administrators for requests that send statistics to an arbitrary hub U...

CVE-2021-36352

Stored cross-site scripting XSS vulnerability in Care2x Hospital Information Management 2.7 Alpha. The vulnerability has found POST requests in /modules/registrationadmission/patientregister.php page with "namemiddle", "addrstr", "station", "namemaiden", "name2", "name3" parameters...

House Rental and Property Listing Cross-site Script Vulnerabilities

House Rental and Property Listing is a system developed in PHP, JavaScript, Bootstrap, CSS and MySQL database. It allows users to easily find the right house or property for rent. A cross-site scripting vulnerability in House Rental and Property Listing 1.0 allows an authenticated attacker to...

SQL Injection Vulnerability in the Frontend Registration Module of 120 Emergency Command Center Web Service System

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A SQL injection vulnerability exists in the frontend registration module of the 120 Emergency Command Center Web...

PT-2019-20528

This module enables you to use special routes for user registration with special roles and custom field sets defined for the role. The module doesn't sufficiently check which user roles can be registered under the scenario when the user tries to register the user with the administrator role. This...

SQL Injection Vulnerability in the Registration Module of Guowei CMS School Cluster System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS school station group system registration module SQL injection vulnerability. Attackers can use the vulnerability to obtain...

CVE-2015-7880: Exposure of Sensitive Information to an Unauthorized Actor

The Entity Registration module 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to obtain sensitive event registration information by leveraging the "Register other accounts" permission and knowledge of usernames...

PT-2016-7398

Name of the Vulnerable Software and Affected Versions Adobe Connect versions 9.5.6 and earlier Description The issue arises from inadequate input validation in the events registration module, which could be exploited in cross-site scripting attacks. Recommendations For Adobe Connect versions 9.5....

CVE-2016-7851: Improper Neutralization of Input During Web Page Generation

Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited in cross-site scripting attacks...

Oracle MyOracle Filter Bypass

Document Title: =============== Oracle Corporation MyOracle - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1261 Oracle Security ID Team Tracking ID: [email protected]:2014...

Oracle Corporation MyOracle - Persistent Vulnerability

Document Title: =============== Oracle Corporation MyOracle - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1261 Oracle Security ID Team Tracking ID: [email protected]...

CORE FORCE防火墙和注册模块多个本地内核缓冲区溢出漏洞

BUGTRAQ ID: 27341 CNCAN ID:CNCAN-2008012102 CORE FORCE是一款免费的防火墙应用程序。 CORE FORCE防火墙和注册模块不正确验证用户提供的输入，本地攻击者可以利用漏洞进行拒绝服务攻击或提升特权。 CORE FORCE的防火墙内核驱动可通过IOCTL函数访问，防火墙驱动模块中的四个IOCTL函数使用从用户空间的输入，并没有对输入缓冲区长度进行正确的验证，通过使用特定构建的参数调用任何一个IOCTL，非特权用户可在这个驱动中触发漏洞并导致拒绝服务攻击，可能导致任意特权提升。 Core Security Technologies CORE...

Meiping network management family of software vulnerability completely analyze-vulnerability warning-the black bar safety net

My home city, Internet Cafe 1 0 0% with meiping network management system, no way! Also it is only the first look at Mae ping, also hope everyone to the sea Han it! Meiping network management software series actually also should be considered several network management software one! Reputation...