1371 matches found
CVE-2024-50969
A Reflected cross-site scripting XSS vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote attackers to inject arbitrary web scripts or HTML via the search parameter...
CVE-2024-50989
A SQL injection vulnerability in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System v1.0 allows an attacker to execute arbitrary SQL commands via the "searchdata " parameter...
CVE-2024-50989
The PHPGurukul Online Marriage Registration System v1.0 is affected by a SQL injection vulnerability located in the /omrs/admin/search.php file. An attacker can exploit this by providing malicious input through the **
CVE-2024-51054
A Cross Site Scriptng XSS vulnerability was found in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System 1.0, which allows remote attackers to execute arbitrary code via the "searchdata" POST request parameter...
CVE-2024-48807
Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...
CVE-2024-48807
Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...
CVE-2024-48807
The PHPGurukul Doctor Appointment Management System v.1.0 is vulnerable to a Cross-Site Scripting (XSS) flaw. The root cause is the application's failure to effectively filter and escape user-supplied data, specifically through the search parameter . A local attacker can exploit this lack of sani...
CVE-2024-48807
Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...
CVE-2024-48807: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...
CVE-2024-48283
Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in /admin//search-result.php via the searchkey parameter...
CVE-2024-48283
Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in the /admin//search-result.php endpoint. The root cause is the improper neutralization of special elements used in an SQL command via the searchkey parameter. This vulnerability allows for potenti...
Exploit for CVE-2024-55270
Student Management System 1.0 CVE-2024-55270 Overview T...
CVE-2024-8468
SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the information stored in it...
PT-2024-39035 · Unknown · Job Portal
Name of the Vulnerable Software and Affected Versions: Job Portal affected versions not specified Description: A SQL injection vulnerability allows an attacker to send a specially designed query through the search parameter in "/jobportal/index.php" and retrieve all the information stored in it...
PHPGurukul Job Portal SQL注入漏洞
PHPGurukul Job Portal is a PHP-based job search website system from PHPGurukul. A SQL injection vulnerability exists in PHPGurukul Job Portal version 1.0, which originates from the search parameter in /jobportal/index.php...
CVE-2024-8468: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the information stored in it...
CVE-2024-43775
SQL Injection in search course titles function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the search parameter...
CVE-2024-43775 Huachu Easytest Online Learning Test Platform - SQL Injection
SQL Injection in search course titles function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the search parameter...
CVE-2024-43775: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in search course titles function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the search parameter...
PT-2024-30647 · Unknown · Easytest Online Test Platform
Name of the Vulnerable Software and Affected Versions: Easytest Online Test Platform versions 24E01 and earlier Description: The issue allows remote authenticated users to execute arbitrary SQL commands via the search parameter in the search course titles function. This enables attackers to run...