272 matches found
CVE-2022-4232
A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to...
CVE-2022-4233
A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /event/admin/?page=user/list. The manipulation of the argument First Name/Last Name leads to cross site scripting. T...
CVE-2022-4233
A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /event/admin/?page=user/list. The manipulation of the argument First Name/Last Name leads to cross site scripting. T...
Design/Logic Flaw
A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to...
Cross site scripting
A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /event/admin/?page=user/list. The manipulation of the argument First Name/Last Name leads to cross site scripting. T...
PT-2022-26368 · Sourcecodester · Sourcecodester Event Registration System
Name of the Vulnerable Software and Affected Versions: SourceCodester Event Registration System version 1.0 Description: A vulnerability has been found in the SourceCodester Event Registration System, allowing for cross site scripting through the manipulation of the First Name/Last Name argument ...
CVE-2022-4233 SourceCodester Event Registration System cross site scripting
A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /event/admin/?page=user/list. The manipulation of the argument First Name/Last Name leads to cross site scripting. T...
CVE-2022-4233
SourceCodester Event Registration System 1.0 is affected by CVE-2022-4233 via XSS in the /event/admin/?page=user/list endpoint, triggered by manipulating the First Name/Last Name parameters. The vulnerability enables cross-site scripting and can be exploited remotely. Affected product/issue detai...
CVE-2022-4233 SourceCodester Event Registration System cross site scripting
A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /event/admin/?page=user/list. The manipulation of the argument First Name/Last Name leads to cross site scripting. T...
CVE-2022-4232
CVE-2022-4232 affects SourceCodester Event Registration System 1.0. The underlying issue is the manipulation of the cmd argument, which leads to unrestricted file upload. Exploitation is described as possible remotely. Multiple connected sources corroborate the core details (critical severity, af...
PT-2022-26365 · Sourcecodester · Sourcecodester Event Registration System
Name of the Vulnerable Software and Affected Versions: SourceCodester Event Registration System version 1.0 Description: A critical issue was found, allowing for unrestricted upload through the manipulation of the cmd argument. This can be exploited remotely. Recommendations: For version 1.0,...
Event Registration System 跨站脚本漏洞
Event Registration System is a QR code-based event registration system by Carlo Montero, a personal developer. A security vulnerability exists in Event Registration System version 1.0. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...
Event Registration System 代码问题漏洞
Event Registration System is an event registration system with QR codes by Carlo Montero Personal Developer. A security vulnerability exists in the Event Registration System version 1.0, which stems from an incorrect manipulation of the parameter cmd leading to unrestricted file uploads...
CVE-2022-4232 SourceCodester Event Registration System unrestricted upload
A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to...
CVE-2020-23466
CVE-2020-23466 concerns a Cross Site Scripting (XSS) vulnerability in the phpgurukul Online Marriage Registration System version 1.0, exploitable via the wzipcode field. The PT-2022-8660 entry documents the affected software/version and notes that unsanitized input in the wzipcode field enables a...
CVE-2020-23466
Cross Site Scripting XSS vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attackers to run arbitrary code via the wzipcode field...
Online Marriage Registration System 跨站脚本漏洞
Online Marriage Registration System is a website builder that supports online marriage registration. A cross-site scripting vulnerability exists in Online Marriage Registration System version 1.0. An attacker can exploit this vulnerability to execute arbitrary code via the wzipcode field...
CVE-2022-31908
Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...
EGavilan Media User-Registration-and-Login-System-With-Admin-Panel SQL注入漏洞
EGavilan Media User-Registration-and-Login-System-With-Admin-Panel is a user registration and login system with an administrative panel from EGavilan Media. EGavilan Media User-Registration -and-Login-System-With-Admin-Panel version 1.0 contains a SQL injection vulnerability, which stems from...
The vulnerability of the automated information system “Registration in OO” arises from the use of pre-set user accounts, allowing a perpetrator to gain unauthorized access to protected information.
The vulnerability of the automated information system “Registration in OO” is related to the use of pre-set user accounts. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...