CVE-2024-10157 PHPGurukul Boat Booking System Reset Your Password Page password-recovery.php sql injection

A vulnerability was found in PHPGurukul Boat Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/password-recovery.php of the component Reset Your Password Page. The manipulation of the argument username/mobileno leads to sql injection...

CVE-2024-10157 PHPGurukul Boat Booking System Reset Your Password Page password-recovery.php sql injection

A vulnerability was found in PHPGurukul Boat Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/password-recovery.php of the component Reset Your Password Page. The manipulation of the argument username/mobileno leads to sql injection...

CVE-2024-10157

The CVE-2024-10157 entry concerns PHPGurukul Boat Booking System v1.0 with an SQL injection in the Reset Your Password Page’s /admin/password-recovery.php, triggered by manipulating the username parameter. The vulnerability can be exploited remotely and has been publicly disclosed. Connected sour...

CVE-2024-10157: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Boat Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/password-recovery.php of the component Reset Your Password Page. The manipulation of the argument username/mobileno leads to sql injection...

Cross site scripting

Cross-site scripting XSS vulnerability in Reset Your Password module in Exponent CMS before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the Username/Email...

CVE-2015-8667

Cross-site scripting XSS vulnerability in Reset Your Password module in Exponent CMS before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the Username/Email...

CVE-2015-8667

Cross-site scripting XSS vulnerability in Reset Your Password module in Exponent CMS before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the Username/Email...

PT-2017-7460

Name of the Vulnerable Software and Affected Versions Exponent CMS versions prior to 2.3.5 Description A cross-site scripting XSS issue exists in the Reset Your Password module, allowing remote attackers to inject arbitrary web script or HTML via the Username/Email field. Recommendations For...

CVE-2015-8667: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Reset Your Password module in Exponent CMS before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the Username/Email...