Waychar enrollment system has a flawed logic vulnerability

Waychar Registration System is an online registration system developed for sporting events and other general purpose activities. A logic flaw vulnerability exists in the Waychar registration system. An attacker can exploit this vulnerability to spoof an administrator login by modifying the value ...

CVE-2020-26052

CVE-2020-26052 affects Online Marriage Registration System 1.0 with stored cross-site scripting (XSS) vulnerabilities in multiple parameters. The NVD entry lists both CVSSv2 (3.5, LOW) and CVSSv3.1 (5.4, MEDIUM) scores. PT-2021-11211 describes stored XSS in multiple parameters and notes a lack of...

Phpgurukul Online Marriage Registration System Cross-Site Scripting Vulnerability

Phpgurukul Online Marriage Registration System is a website builder from the Phpgurukul team that supports online marriage registration. A cross-site scripting vulnerability exists in Phpgurukul Online Marriage Registration System, which stems from a lack of proper validation of client-side data ...

Unauthorized Access Vulnerability in Waychar Enrollment System

Waychar Registration System is an online registration system developed for sporting events and other general purpose activities. An unauthorized access vulnerability exists in the Waychar registration system, which can be exploited by attackers to obtain sensitive information...

Egavilanmedia User Registration & Login System SQL Injection Vulnerability (CNVD-2021-08881)

Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A SQL injection vulnerability exists in EgavilanMedia User Registration & Login System 1.0, which can be exploited by an attacker to execute SQL statements due to the...

File upload vulnerability in Waychar enrollment system (CNVD-2021-10502)

Waychar Registration System is an online registration system developed for sporting events and other general purpose activities. A file upload vulnerability exists in the Waychar registration system, which can be exploited by an attacker to upload a webshell and gain server privileges...

File upload vulnerability in Waychar enrollment system

Waychar Registration System is a free race registration system. A file upload vulnerability exists in the Waychar registration system. An attacker can exploit this vulnerability to gain server privileges...

Logic flaw vulnerability in Waychar enrollment system backend

Waychar Registration System is a free race registration system. A logic flaw vulnerability exists in the backend of the Waychar registration system. An attacker can exploit this vulnerability to log directly into the backend...

Egavilanmedia User Registration & Login System Cross-Site Scripting Vulnerability (CNVD-2021-01537)

Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A cross-site scripting vulnerability exists in EGavilanMedia User Registration and Login System With Admin Panel 1.0, which originates on the admin profile page. The...

CVE-2020-35252

Cross Site Scripting XSS vulnerability via the 'Full Name' parameter in the User Registration section of User Registration & Login System with Admin Panel 1.0...

CVE-2020-35151

CVE-2020-35151 affects The Online Marriage Registration System 1.0. The vulnerability is a Time-Based SQL Injection in the post parameter searchdata of user/search.php (and noted in admin/search.php in the exploit). Root cause: lack of input validation for searchdata, enabling attacker-controlled...

CVE-2020-35151

The Online Marriage Registration System 1.0 post parameter "searchdata" in the user/search.php request is vulnerable to Time Based Sql Injection...

CVE-2020-35273

EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery CSRF to remotely gain privileges in the User Profile panel. An attacker can update any user's account...

Egavilanmedia User Registration & Login System 跨站请求伪造漏洞

Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A cross-site request forgery vulnerability exists in EgavilanMedia User Registration & Login System with Admin Panel 1.0, which allows to remotely obtain privileges to ...

Online Marriage Registration System 1.0 - 'searchdata' SQL Injection

Exploit Title: Online Marriage Registration System 1.0 - 'searchdata' SQL Injection Date: 12-21-2020 Exploit Authors: Andrea Bruschi, Raffaele Sabato Vendor: Phpgurukul Product Web Page: https://phpgurukul.com/online-marriage-registration-system-using-php-and-mysql/ Version: 1.0 CVE: CVE-2020-351...

Online Marriage Registration System (OMRS) 1.0 - Remote Code Execution (2)

Exploit Title: Online Marriage Registration System OMRS 1.0 - Remote Code Execution Authenticated Google Dork: N/A Date: 2020-14-12 Exploit Author: Andrea Bruschi - www.andreabruschi.net Vendor Homepage: https://phpgurukul.com/ Software Link:...

SQL Injection Vulnerability in Waychar Enrollment System VER 0.30 Article Query Function

Waychar Registration System is a free race registration system. A SQL injection vulnerability exists in the VER 0.30 article query function of the waychar registration system, which can be exploited by attackers to obtain sensitive information from the database...

File Inclusion Vulnerability in waychar Enrollment System

Waychar Registration System is a free race registration system. A file inclusion vulnerability exists in the waychar registration system that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in waychar Enrollment System Update File

Waychar Registration System is a free race registration system. A SQL injection vulnerability exists in the waychar registration system update file, which can be exploited by an attacker to obtain sensitive information from the database...

Online Marriage Registration System 1.0 - Persistent Cross-Site Scripting

Exploit Title: Online Marriage Registration System 1.0 - Persistent Cross-Site Scripting Google Dork: N/A Date: 2020-05-26 Exploit Author: that faceless coderInveteck Global Vendor Homepage: https://phpgurukul.com/ Software Link:...