CVE-2024-50677

CVE-2024-50677 describes a cross-site scripting (XSS) vulnerability in OroPlatform CMS v5.1 where an attacker can inject a crafted payload into the Search parameter to execute arbitrary web scripts or HTML. The root cause is improper handling/validation of user input in the search functionality, ...

CVE-2024-50677

A cross-site scripting XSS vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter...

CVE-2024-12229

A vulnerability classified as critical was found in PHPGurukul Complaint Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/complaint-search.php. The manipulation of the argument search leads to sql injection. The attack can be launched remotely...

CVE-2024-50969

A Reflected cross-site scripting XSS vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote attackers to inject arbitrary web scripts or HTML via the search parameter...

PT-2024-34478 · Unknown · Code-Projects Jonnys Liquor

Name of the Vulnerable Software and Affected Versions: Code-projects Jonnys Liquor version 1.0 Description: A Reflected cross-site scripting XSS vulnerability in browse.php allows remote attackers to inject arbitrary web scripts or HTML via the search parameter. This issue enables attackers to...

CVE-2024-50989

A SQL injection vulnerability in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System v1.0 allows an attacker to execute arbitrary SQL commands via the "searchdata " parameter...

CVE-2024-50989

The CVE-2024-50989 entry documents a SQL injection vulnerability in PHPGurukul Online Marriage Registration System v1.0, originating from the /omrs/admin/search.php endpoint where the searchdata parameter is injectable. The vulnerability allows an attacker to execute arbitrary SQL commands, as de...

CVE-2024-51054

A Cross Site Scriptng XSS vulnerability was found in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System 1.0, which allows remote attackers to execute arbitrary code via the "searchdata" POST request parameter...

CVE-2024-48807

Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...

CVE-2024-48807

Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...

CVE-2024-48807

CVE-2024-48807 is a Cross-Site Scripting (XSS) vulnerability in PHPGurukul Doctor Appointment Management System v1.0. The flaw allows a local attacker to execute arbitrary code via the search parameter. See CVE description: XSS in PHPGurukul’s Doctor Appointment Management System, enabling code e...

CVE-2024-48807

Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...

CVE-2024-48283

Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in /admin//search-result.php via the searchkey parameter...

CVE-2024-48283

Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in /admin//search-result.php via the searchkey parameter. Affects component: admin search results handler; root cause: SQLi in the search-key processing. CVSS 3.1 base score 9.8 (CRITICAL) with netw...

Exploit for CVE-2024-55270

Student Management System 1.0 CVE-2024-55270 Overview T...

CVE-2024-8468

SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the information stored in it...

PT-2024-39035 · Unknown · Job Portal

Name of the Vulnerable Software and Affected Versions: Job Portal affected versions not specified Description: A SQL injection vulnerability allows an attacker to send a specially designed query through the search parameter in "/jobportal/index.php" and retrieve all the information stored in it...

PHPGurukul Job Portal SQL注入漏洞

PHPGurukul Job Portal is a PHP-based job search website system from PHPGurukul. A SQL injection vulnerability exists in PHPGurukul Job Portal version 1.0, which originates from the search parameter in /jobportal/index.php...

CVE-2024-43775

SQL Injection in search course titles function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the search parameter...

CVE-2024-43775 Huachu Easytest Online Learning Test Platform - SQL Injection

SQL Injection in search course titles function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the search parameter...