CVE-2025-56215

The phpgurukul Hospital Management System version 4.0 is vulnerable to SQL Injection within the contact.php file. The root cause is a lack of validation for externally entered SQL statements in the pagetitle parameter. An attacker can exploit this flaw to execute unauthorized SQL commands and ste...

CVE-2020-11714

eten PSG-6528VM 1.1 devices allow XSS via System Contact or System Location...

CVE-2019-11370

Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pwsnmp.html "System contact" field...

VulnCheck KEV: CVE-2019-11370

Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pwsnmp.html "System contact" field...

CVE-2020-11714

eten PSG-6528VM 1.1 devices allow XSS via System Contact or System Location...

CVE-2020-11714

eten PSG-6528VM 1.1 devices allow XSS via System Contact or System Location...

CVE-2020-11714

eten PSG-6528VM 1.1 devices allow XSS via System Contact or System Location...

CVE-2020-11714: Improper Neutralization of Input During Web Page Generation

eten PSG-6528VM 1.1 devices allow XSS via System Contact or System Location...

CVE-2019-11370

Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pwsnmp.html "System contact" field...

Cross site scripting

Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pwsnmp.html "System contact" field...

CVE-2019-11370

Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pwsnmp.html "System contact" field...

CVE-2019-11370

Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pwsnmp.html "System contact" field...

CVE-2019-11370: Improper Neutralization of Input During Web Page Generation

Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pwsnmp.html "System contact" field...