8152 matches found
PT-2024-17875 · Unknown · Phpgurukul Maid Hiring Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Maid Hiring Management System version 1.0 Description: A vulnerability was found in the PHPGurukul Maid Hiring Management System. It affects unknown code of the file /admin/aboutus.php of the component About Us Page. The manipulati...
CVE-2024-13007: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Codezips Event Management System 1.0. Affected is an unknown function of the file /contact.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...
PHPGurukul Maid Hiring Management System 代码注入漏洞
Maid Hiring Management System is a maid hiring management system. The Maid Hiring Management System suffers from a cross-site scripting vulnerability that stems from a lack of adequate validation and escaping of the title parameter input in the file /admin/aboutus.php. An attacker can exploit thi...
CVE-2024-13013: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in PHPGurukul Maid Hiring Management System 1.0. Affected is an unknown function of the file /admin/contactus.php of the component Contact Us Page. The manipulation of the argument page title leads to cross site scripting. It is...
CVE-2024-13017: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/aboutus.php of the component About Us Page. The manipulation of the argument title leads to cross site scripting. The attack c...
Codezips Event Management System 注入漏洞
Codezips Event Management System is an open source event management system from Codezips. An injection vulnerability exists in Codezips Event Management System version 1.0, which stems from an incorrect manipulation of the parameter title that can lead to SQL injection...
WordPress Elementor Header & Footer Builder plugin <= 1.6.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title Widget vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Page Title Widget vulnerability discovered by wesley wcraft in WordPress Plugin Ultimate Addons for Elementor - Lite versions = 1.6.46...
PT-2024-36666 · Pearlbells · Pearlbells Flash News / Post +1
Name of the Vulnerable Software and Affected Versions: Pearlbells Flash News / Post Responsive versions n/a through 4.1 Pearlbells Post Title TypeWriter versions n/a through 4.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Privilege Escalation...
UBUNTU-CVE-2024-10043
An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 17.4.6, all versions starting from 17.5 before 17.5.4 all versions starting from 17.6 before 17.6.2, that allows group users to view confidential incident title through the Wiki History Diff feature,...
PT-2024-16382
Name of the Vulnerable Software and Affected Versions Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder plugin for WordPress versions up to, and including, 1.20.2 Description The issue is related to Stored Cross-Site Scripting via the post title...
Test page title
Test page heading...
CVE-2022-38947
SQL Injection vulnerability in Flipkart-Clone-PHP version 1.0 in entry.php in producttitle parameter, allows attackers to execute arbitrary code...
CVE-2022-38947
SQL Injection vulnerability in Flipkart-Clone-PHP version 1.0 in entry.php in producttitle parameter, allows attackers to execute arbitrary code...
CVE-2024-54924: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection was found in /admin/editcontent.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the title and content parameters...
Flipkart-Clone-PHP 安全漏洞
Flipkart-Clone-PHP is an application by Jigar Sable Personal Developer. A security vulnerability exists in Flipkart-Clone-PHP version 1.0, which stems from the producttitle parameter in the entry.php page containing a SQL injection vulnerability...
Kashipara E-learning Management System 安全漏洞
Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System v1.0. An attacker can exploit the vulnerability to access the database by executing arbitrary SQL commands via the title and content...
The vulnerability of the RenderTune rendering tool, related to the lack of measures taken to protect website structures, allows attackers to perform cross-site scripting attacks.
The vulnerability of the RenderTune rendering tool is related to the lack of measures taken to protect the structure of web pages when processing the Upload Title parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...
CVE-2024-53760
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Capitalize My Title Capitalize My Title capitalize-my-title allows Stored XSS.This issue affects Capitalize My Title: from n/a through = 0.5.3...
CVE-2024-53760 WordPress Capitalize My Title WordPress plugin <= 0.5.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Capitalize My Title Capitalize My Title capitalize-my-title allows Stored XSS.This issue affects Capitalize My Title: from n/a through = 0.5.3...
