1679 matches found
Moodle LMS 4.0 - Cross-Site Scripting (XSS)
Exploit Title: Moodle LMS 4.0 - Cross-Site Scripting XSS Date: 26/10/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://moodle.org/ Software Link: https://git.in.moodle.com/moodle Version: 4.0 Tested on: XAMPP, Windows 10 Contact: https://twitter.com/dmaral3noz Description: A Cross Site...
WebTareas 2.4 - Reflected XSS (Unauthorised) Vulnerability
Exploit Title: WebTareas 2.4 - Reflected XSS Unauthorised Exploit Author: Hubert Wojciechowski Contact Author: email protected Vendor Homepage: https://sourceforge.net/projects/webtareas/ Software Link: https://sourceforge.net/projects/webtareas/ Version: 2.4 Tested on: Windows 10 using XAMPP,...
CVE-2023-27213
CVE-2023-27213 affects Online Student Management System v1.0. The vulnerability is a SQL injection in the searchdata parameter of /eduauth/student/search.php, enabling unauthorized access to data due to improper input handling. The CVSS indicates high impact (Confidentiality/Integrity/Availabilit...
CVE-2022-48120
SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd on March 13, 2021, allows attackers to execute arbitrary commands via the contact and doctor parameters to /search.php...
CVE-2022-48120
CVE-2022-48120 concerns a SQL Injection flaw in kishan0725 Hospital Management System. The vulnerability is triggered in /search.php via the contact and doctor parameters, allowing an attacker to execute arbitrary commands. Root cause is a lack of input validation/parameterization in the affected...
CVE-2007-10001
A vulnerability classified as problematic has been found in web-cyradm. This affects an unknown part of the file search.php. The manipulation of the argument searchstring leads to sql injection. It is recommended to apply a patch to fix this issue. The identifier VDB-217449 was assigned to this...
Sql injection
A vulnerability classified as problematic has been found in web-cyradm. This affects an unknown part of the file search.php. The manipulation of the argument searchstring leads to sql injection. It is recommended to apply a patch to fix this issue. The identifier VDB-217449 was assigned to this...
CVE-2007-10001
CVE-2007-10001 is associated with web-cyradm. Connected sources confirm a SQL injection vulnerability in an unknown part of search.php caused by unsafely handling the searchstring parameter. The issue affects web-cyradm and is mitigated by applying a patch (as noted in multiple references). Pract...
CVE-2007-10001 web-cyradm search.php sql injection
A vulnerability classified as problematic has been found in web-cyradm. This affects an unknown part of the file search.php. The manipulation of the argument searchstring leads to sql injection. It is recommended to apply a patch to fix this issue. The identifier VDB-217449 was assigned to this...
CVE-2007-10001 web-cyradm search.php sql injection
A vulnerability classified as problematic has been found in web-cyradm. This affects an unknown part of the file search.php. The manipulation of the argument searchstring leads to sql injection. It is recommended to apply a patch to fix this issue. The identifier VDB-217449 was assigned to this...
web-cyradm SQL注入漏洞
web-cyradm is web-cyradm open source a web-based software. web-cyradm has a SQL injection vulnerability that stems from a problem in the unknown section of the file search.php, where manipulation of the parameter searchstring can lead to sql injection...
PT-2023-9860 · Unknown · Web-Cyradm
Name of the Vulnerable Software and Affected Versions: web-cyradm affected versions not specified Description: A problematic issue has been found in web-cyradm, affecting the file search.php. The manipulation of the searchstring argument leads to sql injection. Recommendations: Apply a patch to f...
CVE-2022-43369
AutoTaxi Stand Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component search.php...
Cross site scripting
AutoTaxi Stand Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component search.php...
CVE-2022-43369
AutoTaxi Stand Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component search.php...
CVE-2022-43369
AutoTaxi Stand Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component search.php...
CVE-2022-43369
CVE-2022-43369 affects AutoTaxi Stand Management System v1.0, with a cross-site scripting (XSS) vulnerability in the search.php component. The issue is described across multiple sources as a client-side/script injection risk in the search functionality, contributing to a CVSS v3.1 base score of 6...
Cross-site Scripting (XSS)
microweber/microweber is vulnerable to cross-site scripting. The vulnerability exists due to the vulnerable microweber-templates/bootstrap5, microweber-templates/new-world and microweber-templates/shopmag dependencies used in composer.json, allowing an attacker to inject and execute malicious...