Lucene search
+L

2077 matches found

OSV
OSV
added 2024/08/19 8:15 p.m.8 views

CVE-2024-43317

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Metagauss User Registration Team RegistrationMagic allows Cross-Site Scripting XSS.This issue affects RegistrationMagic: from n/a through 6.0.1.0...

6.1CVSS5.8AI score0.00267EPSS
SaveExploits0References1
Packet Storm
Packet Storm
added 2024/08/19 12:00 a.m.231 views

Hotel Management System 1.0 Cross Site Request Forgery

============================================================================================================================================= | Title : Hotel Management System 1.0 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3 64 bit...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/13 12:00 a.m.241 views

Employees Pay Slip PDF Generator System 1.0 Cross Site Request Forgery

============================================================================================================================================= | Title : Employees Pay Slip PDF Generator System 1.0 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefo...

7.4AI score
SaveExploits0
NVD
NVD
added 2024/08/01 9:15 p.m.20 views

CVE-2023-52209

Improper Privilege Management vulnerability in WPForms, LLC. WPForms User Registration allows Privilege Escalation.This issue affects WPForms User Registration: from n/a through 2.1.0...

8CVSS0.00366EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/01 9:04 p.m.12 views

CVE-2023-52209 WordPress WPForms User Registration plugin <= 2.1.0 - Authenticated Privilege Escalation vulnerability

Improper Privilege Management vulnerability in WPForms, LLC. WPForms User Registration allows Privilege Escalation.This issue affects WPForms User Registration: from n/a through 2.1.0...

8CVSS7AI score0.00366EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/01 9:04 p.m.36 views

CVE-2023-52209 WordPress WPForms User Registration plugin <= 2.1.0 - Authenticated Privilege Escalation vulnerability

Improper Privilege Management vulnerability in WPForms, LLC. WPForms User Registration allows Privilege Escalation.This issue affects WPForms User Registration: from n/a through 2.1.0...

8CVSS0.00366EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/08/01 12:00 a.m.24 views

PT-2024-14475 · WordPress · Wpforms User Registration

Name of the Vulnerable Software and Affected Versions: WPForms User Registration versions n/a through 2.1.0 Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in WPForms User Registration. Recommendations: For versions n/a through 2.1.0, update to a...

8CVSS6.8AI score0.00366EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/08/01 12:00 a.m.7 views

WordPress plugin WPForms User Registration 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

8CVSS6.8AI score0.00366EPSS
SaveExploits0References2
OSV
OSV
added 2024/07/31 12:15 p.m.7 views

CVE-2024-7321

A vulnerability classified as problematic was found in itsourcecode Online Blood Bank Management System 1.0. This vulnerability affects unknown code of the file signup.php of the component User Registration Handler. The manipulation of the argument user leads to cross site scripting. The attack c...

6.1CVSS3.7AI score0.00555EPSS
SaveExploits1References4
NVD
NVD
added 2024/07/31 12:15 p.m.34 views

CVE-2024-7321

A vulnerability classified as problematic was found in itsourcecode Online Blood Bank Management System 1.0. This vulnerability affects unknown code of the file signup.php of the component User Registration Handler. The manipulation of the argument user leads to cross site scripting. The attack c...

6.9CVSS0.00555EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/07/31 11:31 a.m.10 views

CVE-2024-7321 itsourcecode Online Blood Bank Management System User Registration signup.php cross site scripting

A vulnerability classified as problematic was found in itsourcecode Online Blood Bank Management System 1.0. This vulnerability affects unknown code of the file signup.php of the component User Registration Handler. The manipulation of the argument user leads to cross site scripting. The attack c...

6.9CVSS6.1AI score0.00555EPSS
SaveExploits1References4
CVE
CVE
added 2024/07/31 11:31 a.m.61 views

CVE-2024-7321

The CVE-2024-7321 entry concerns itsourcecode Online Blood Bank Management System 1.0. The vulnerability resides in the User Registration Handler, specifically the signup.php file, where manipulation of the user parameter enables cross-site scripting. Attacks can be conducted remotely and the vul...

6.9CVSS4.5AI score0.00555EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2024/07/31 11:31 a.m.38 views

CVE-2024-7321 itsourcecode Online Blood Bank Management System User Registration signup.php cross site scripting

A vulnerability classified as problematic was found in itsourcecode Online Blood Bank Management System 1.0. This vulnerability affects unknown code of the file signup.php of the component User Registration Handler. The manipulation of the argument user leads to cross site scripting. The attack c...

6.9CVSS0.00555EPSS
SaveExploits1References4
NVD
NVD
added 2024/07/31 6:15 a.m.31 views

CVE-2024-6695

it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions. This is due to improper logic flow on the user registration process...

9.8CVSS0.00796EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/07/31 6:00 a.m.29 views

CVE-2024-6695 profile-builder <= 3.11.8 - Unauthenticated Privilege Escalation

it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions. This is due to improper logic flow on the user registration process...

7AI score0.00796EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/07/31 6:00 a.m.40 views

CVE-2024-6695 profile-builder <= 3.11.8 - Unauthenticated Privilege Escalation

it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions. This is due to improper logic flow on the user registration process...

0.00796EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2024/07/30 10:46 p.m.86 views

ItSourceCode Stored XSS via User Registration

Stored XSS in Online Blood Bank Management System V1.0...

6.3AI score
SaveExploits0
VulnCheck KEV
VulnCheck KEV
added 2024/07/23 12:00 a.m.10 views

VulnCheck KEV: CVE-2024-6695

it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions. This is due to improper logic flow on the user registration process...

9.8CVSS5.6AI score0.00796EPSS
SaveExploits1References1
Metasploit
Metasploit
added 2024/07/19 12:00 a.m.725 views

ProjectSend r1295 - r1605 Unauthenticated Remote Code Execution

This module exploits an improper authorization vulnerability in ProjectSend versions r1295 through r1605. The vulnerability allows an unauthenticated attacker to obtain remote code execution by enabling user registration, disabling the whitelist of allowed file extensions, and uploading a malicio...

9.8CVSS9.7AI score0.91458EPSS
SaveExploits4
Patchstack
Patchstack
added 2024/07/18 1:00 p.m.11 views

WordPress WPForms User Registration plugin <= 2.1.0 - Authenticated Privilege Escalation vulnerability

Authenticated Privilege Escalation vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin WPForms User Registration versions = 2.1.0...

8CVSS7AI score0.00366EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder