1559 matches found
CVE-2024-50677
OroPlatform CMS v5.1 is vulnerable to a two-click reflected XSS vulnerability due to improper neutralization of user input in the Search parameter. An attacker can craft a malicious link containing a JavaScript payload; if a victim clicks the link and subsequently interacts with the search bar, t...
CVE-2024-50677: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter...
OroPlatform 安全漏洞
OroPlatform is an Oro open source PHP Business Application Platform BAP designed to make custom business application development easier and faster. A security vulnerability exists in OroPlatform version v5.1, which stems from vulnerability to cross-site scripting attacks, where an attacker can...
CVE-2024-12229
A vulnerability classified as critical was found in PHPGurukul Complaint Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/complaint-search.php. The manipulation of the argument search leads to sql injection. The attack can be launched remotely...
CVE-2024-50969
A Reflected cross-site scripting XSS vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote attackers to inject arbitrary web scripts or HTML via the search parameter...
CVE-2024-50969: Improper Neutralization of Input During Web Page Generation
A Reflected cross-site scripting XSS vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote attackers to inject arbitrary web scripts or HTML via the search parameter...
PT-2024-34478 · Unknown · Code-Projects Jonnys Liquor
Name of the Vulnerable Software and Affected Versions: Code-projects Jonnys Liquor version 1.0 Description: A Reflected cross-site scripting XSS vulnerability in browse.php allows remote attackers to inject arbitrary web scripts or HTML via the search parameter. This issue enables attackers to...
CVE-2024-51054
A Cross Site Scriptng XSS vulnerability was found in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System 1.0, which allows remote attackers to execute arbitrary code via the "searchdata" POST request parameter...
CVE-2024-50989
A SQL injection vulnerability in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System v1.0 allows an attacker to execute arbitrary SQL commands via the "searchdata " parameter...
CVE-2024-50989
The PHPGurukul Online Marriage Registration System v1.0 is affected by a SQL injection vulnerability located in the /omrs/admin/search.php file. An attacker can exploit this by providing malicious input through the **
CVE-2024-48807
Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...
PT-2024-33234
Name of the Vulnerable Software and Affected Versions PHPGurukul Doctor Appointment Management System version 1.0 Description The issue allows a local attacker to execute arbitrary code via the search parameter. This can lead to the execution of malicious scripts, potentially compromising the...
CVE-2024-48807: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...
CVE-2024-48807
Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...
CVE-2024-48807
Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...
CVE-2024-48807
The PHPGurukul Doctor Appointment Management System v.1.0 is vulnerable to a Cross-Site Scripting (XSS) flaw. The root cause is the application's failure to effectively filter and escape user-supplied data, specifically through the search parameter . A local attacker can exploit this lack of sani...
CVE-2024-48283
Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in /admin//search-result.php via the searchkey parameter...
CVE-2024-48283
Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in the /admin//search-result.php endpoint. The root cause is the improper neutralization of special elements used in an SQL command via the searchkey parameter. This vulnerability allows for potenti...
