2321 matches found
CVE-2024-2715: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/user-search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be launche...
CVE-2024-2269
A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation of the argument search leads to sql injection. The attack can be launched remotely. The...
CVE-2024-2269
CVE-2024-2269 affects keerti1924 Online-Book-Store-Website 1.0. The vulnerability is in the /search.php file where the search parameter is manipulated to cause SQL injection. It can be exploited remotely, and the exploit has been disclosed publicly. The CVSS metrics across sources indicate high s...
PT-2024-19530
Name of the Vulnerable Software and Affected Versions keerti1924 Online-Book-Store-Website version 1.0 Description A critical issue has been found in the keerti1924 Online-Book-Store-Website, affecting an unknown functionality of the file /search.php. The manipulation of the search argument leads...
CVE-2024-2269: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation of the argument search leads to sql injection. The attack can be launched remotely. The...
PT-2024-12223 · Unknown · Oretnom23 Judging Management System
Name of the Vulnerable Software and Affected Versions: oretnom23 Judging Management System version 1.0 Description: The issue allows remote attackers to execute arbitrary code and obtain sensitive information via the txtsearch parameter in the "review search.php" endpoint. Recommendations: For...
Hospital Management System SQL Injection Vulnerability (CNVD-2026-32769)
Hospital Management System is a hospital management system developed by PHPGurukul Company, based on PHP and MySQL. The Hospital Management System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the searchdata parameter of the...
CVE-2024-0363
A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file admin/patient-search.php. The manipulation of the argument searchdata leads to sql injection. The exploit has been...
Sql injection
A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file admin/patient-search.php. The manipulation of the argument searchdata leads to sql injection. The exploit has been...
CVE-2024-0363
CVE-2024-0363 affects PHPGurukul Hospital Management System 1.0. The vulnerability lies in the admin/patient-search.php component where manipulating the argument enables SQL injection. Public disclosure of the exploit is noted, indicating potential practical abuse. No remediation or patch detail...
CVE-2024-0363 PHPGurukul Hospital Management System patient-search.php sql injection
A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file admin/patient-search.php. The manipulation of the argument searchdata leads to sql injection. The exploit has been...
CVE-2024-0363: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file admin/patient-search.php. The manipulation of the argument searchdata leads to sql injection. The exploit has been...
PT-2024-15498
Name of the Vulnerable Software and Affected Versions PHPGurukul Hospital Management System version 1.0 Description A critical issue has been found in the PHPGurukul Hospital Management System, affecting some unknown functionality of the file admin/patient-search.php. The manipulation of the...
Cross site scripting
A vulnerability, which was classified as problematic, was found in code-projects E-Commerce Site 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument keyword with the input leads to cross site scripting. It is possible to launch the attack remotely. The...
CVE-2023-7124 code-projects E-Commerce Site search.php cross site scripting
A vulnerability, which was classified as problematic, was found in code-projects E-Commerce Site 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument keyword with the input leads to cross site scripting. It is possible to launch the attack remotely. The...
CVE-2023-7124: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in code-projects E-Commerce Site 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument keyword with the input leads to cross site scripting. It is possible to launch the attack remotely. The...
CVE-2019-25156
A vulnerability classified as problematic was found in dstar2018 Agency up to 61. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument QSType/QuickSearch leads to cross site scripting. The attack can be launched remotely. The patch is...
CVE-2019-25156
A vulnerability classified as problematic was found in dstar2018 Agency up to 61. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument QSType/QuickSearch leads to cross site scripting. The attack can be launched remotely. The patch is...
CVE-2019-25156
CVE-2019-25156 affects dstar2018 Agency versions up to 61. The vulnerability is in the unknown functionality of the file search.php, where manipulating the argument QSType/QuickSearch enables cross-site scripting. The attack can be launched remotely. A patch is provided (hash: 975b56953efabb43451...
CVE-2019-25156
A vulnerability classified as problematic was found in dstar2018 Agency up to 61. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument QSType/QuickSearch leads to cross site scripting. The attack can be launched remotely. The patch is...