Lucene search
+L

272 matches found

CNVD
CNVD
added 2024/12/30 12:0 a.m.4 views

Maid Hiring Management System /admin/search-maid.php File Cross-Site Scripting Vulnerability

Maid Hiring Management System is a maid hiring management system. The Maid Hiring Management System suffers from a cross-site scripting vulnerability that stems from a lack of sufficient input validation of the searchdata parameter in file /admin/search-maid.php. An attacker could use this...

6.1CVSS4AI score0.00351EPSS
Exploits1References1
OSV
OSV
added 2024/12/29 9:15 p.m.6 views

CVE-2024-13023

A vulnerability has been found in PHPGurukul Maid Hiring Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/search-maid.php of the component Search Maid Page. The manipulation of the argument searchdata leads to cross site scripting. Th...

6.1CVSS3.8AI score0.00351EPSS
Exploits1References4
NVD
NVD
added 2024/12/06 6:15 p.m.32 views

CVE-2024-48703

PhpGurukul Medical Card Generation System v1.0 is vulnerable to Cross Site Scripting XSS in /admin/search-medicalcard.php via the searchdata parameter...

4.8CVSS0.00267EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/12/06 12:0 a.m.8 views

PT-2024-33185 · Unknown · Phpgurukul Medical Card Generation System

Name of the Vulnerable Software and Affected Versions: PhpGurukul Medical Card Generation System version 1.0 Description: The issue is related to Cross Site Scripting XSS in the /admin/search-medicalcard.php endpoint via the searchdata parameter. This allows for potential malicious script...

4.8CVSS6.3AI score0.00267EPSS
Exploits1References6
CVE
CVE
added 2024/12/06 12:0 a.m.77 views

CVE-2024-48703

The CVE-2024-48703 entry affects PhpGurukul Medical Card Generation System v1.0, with a Cross-Site Scripting (XSS) vulnerability in /admin/search-medicalcard.php via the searchdata parameter. The underlying issue is improper handling of input leading to script injection; impact is limited to XSS ...

4.8CVSS6.1AI score0.00267EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2024/12/06 12:0 a.m.19 views

CVE-2024-48703

PhpGurukul Medical Card Generation System v1.0 is vulnerable to Cross Site Scripting XSS in /admin/search-medicalcard.php via the searchdata parameter...

0.00267EPSS
Exploits1References1
NVD
NVD
added 2024/11/27 2:15 p.m.30 views

CVE-2024-53635

A Reflected Cross Site Scripting XSS vulnerability was found in /covid-tms/patient-search-report.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata POST request parameter...

4.8CVSS0.00473EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/11/27 12:0 a.m.3 views

PHPGurukul COVID 19 Testing Management System 跨站脚本漏洞

PHPGurukul COVID 19 Testing Management System is a COVID 19 testing management system from PHPGurukul Inc. A cross-site scripting vulnerability exists in PHPGurukul COVID 19 Testing Management System v1.0, which stems from a Reflective Cross-Site Scripting XSS vulnerability that allows remote...

4.8CVSS5.7AI score0.00473EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/11/27 12:0 a.m.16 views

CVE-2024-53635

A Reflected Cross Site Scripting XSS vulnerability was found in /covid-tms/patient-search-report.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata POST request parameter...

6.7AI score0.00473EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/11/27 12:0 a.m.5 views

PT-2024-35797 · Unknown · Phpgurukul Covid19 Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul COVID 19 Testing Management System version 1.0 Description: A Reflected Cross Site Scripting XSS issue was found in the /covid-tms/patient-search-report.php endpoint, which allows remote attackers to execute arbitrary code via the...

4.8CVSS6.9AI score0.00473EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/11/25 12:0 a.m.6 views

1000 Projects Beauty Parlour Management System SQL注入漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which stems from an incorrect manipulation of the parameter searchdata that can...

9.8CVSS7.9AI score0.00827EPSS
Exploits1References5
OSV
OSV
added 2024/11/12 4:15 a.m.3 views

CVE-2024-11101

A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/search-invoices.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack...

9.8CVSS5.8AI score0.0051EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/11/12 12:0 a.m.3 views

1000 Projects Beauty Parlour Management System 安全漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. A security vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which stems from an incorrect manipulation of the parameter searchdata that can lead ...

9.8CVSS5.5AI score0.0051EPSS
Exploits1References5
OSV
OSV
added 2024/11/11 3:15 p.m.5 views

CVE-2024-50989

A SQL injection vulnerability in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System v1.0 allows an attacker to execute arbitrary SQL commands via the "searchdata " parameter...

9.8CVSS6.1AI score0.00496EPSS
Exploits1References1
OSV
OSV
added 2024/11/11 3:15 p.m.2 views

CVE-2024-51054

A Cross Site Scriptng XSS vulnerability was found in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System 1.0, which allows remote attackers to execute arbitrary code via the "searchdata" POST request parameter...

4.8CVSS6.1AI score0.00388EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/11/11 12:0 a.m.4 views

PT-2024-16763 · Unknown · 1000 Projects Beauty Parlour Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Beauty Parlour Management System version 1.0 Description: A critical issue has been found in the 1000 Projects Beauty Parlour Management System. The problem is related to an unknown function of the file /admin/search-invoices.ph...

9.8CVSS6AI score0.0051EPSS
Exploits1References12
Vulnrichment
Vulnrichment
added 2024/11/11 12:0 a.m.13 views

CVE-2024-50990

A Reflected Cross Site Scriptng XSS vulnerability was found in /omrs/user/search.php in PHPGurukul Online Marriage Registration System v1.0, which allows remote attackers to execute arbitrary code via the "searchdata" POST request parameter...

7.1AI score0.00406EPSS
Exploits1References1
CNVD
CNVD
added 2024/11/07 12:0 a.m.5 views

Car Rental Portal /search.php file cross-site scripting vulnerability

Car Rental Portal is a rental car portal. Car Rental Portal suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the /search.php file parameter searchdata, which can be exploited by an attacker to execute arbitrary...

6.1CVSS4.5AI score0.00418EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/11/02 12:0 a.m.6 views

PT-2024-16476 · Unknown · Phpgurukul Car Rental Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul Car Rental Portal version 1.0 Description: A vulnerability was found in the processing of the file /search.php, where the manipulation of the searchdata argument leads to cross-site scripting. The attack may be initiated remotely...

6.1CVSS6.6AI score0.00418EPSS
Exploits1References10
CNNVD
CNNVD
added 2024/11/02 12:0 a.m.6 views

PHPGurukul Car Rental Portal 跨站脚本漏洞

Car Rental Portal is a rental car portal. Car Rental Portal suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the /search.php file parameter searchdata, which can be exploited by an attacker to execute arbitrary...

6.1CVSS6AI score0.00418EPSS
Exploits1References5
Rows per page
Query Builder