151 matches found
CVE-2024-37906 Admidio has Blind SQL Injection in ecard_send.php
Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.3.9, there is an SQL Injection in the /admprogram/modules/ecards/ecardsend.php source file of the Admidio Application. The SQL Injection results in a compromise of the...
CVE-2024-28323
The bwdates-report-result.php file in Phpgurukul User Registration & Login and User Management System 3.1 contains a potential security vulnerability related to user input validation. The script retrieves user-provided date inputs without proper validation, making it susceptible to SQL injection...
CVE-2024-25202
Cross Site Scripting vulnerability in Phpgurukul User Registration & Login and User Management System 1.0 allows attackers to run arbitrary code via the search bar...
CVE-2024-25202
CVE-2024-25202 is a cross-site scripting vulnerability in the Phpgurukul User Registration & Login and User Management System v1.0. The vulnerability affects the system’s search bar and enables attackers to run arbitrary code. Reported metrics indicate a CVSS v3.1 base score of 6.1 (Network acces...
CVE-2023-40851
Cross Site Scripting XSS vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to run arbitrary code via fname, lname, email, and contact fields of the user registration page...
CVE-2023-40852
SQL Injection vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to obtain sensitive information via crafted string in the admin user name field on the admin log in page...
User Management System and User Registration & Login and User Management System SQL Injection Vulnerabilities
User Registration & Login and User Management System is a user management system with admin panel. A security vulnerability exists in Phpgurukul User Registration & Login and User Management System With admin panel version 3.0, which originates from a vulnerability that allows an attacker to gain...
CVE-2023-40851
CVE-2023-40851 affects Phpgurukul’s User Registration & Login and User Management System with admin panel 3.0. The vulnerability is a Cross Site Scripting (XSS) flaw in the user registration page, where attacker-controlled inputs in fname, lname, email, or contact can lead to arbitrary code execu...
CVE-2023-40852
SQL Injection vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to obtain sensitive information via crafted string in the admin user name field on the admin log in page...
CVE-2023-40852
CVE-2023-40852 pertains to a SQL Injection vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel version 3.0. The issue is triggered by crafting a string in the admin username field on the admin login page, indicating improper input handling in the admi...
User Registration & Login and User Management System v3.0 - SQL Injection Vulnerability
Exploit Title: User Registration & Login and User Management System v3.0 - SQL Injection Unauthenticated Exploit Author: Ashutosh Singh Umath Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/user-registration-login-and-user-management-system-with-admin-panel/ Version:...
CMSshop 1 Cross Site Scripting
==================================================================================================================================== | Title : CMSshopir v1 XSS Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 66.0.332-bit | | Vendor :...
CVE-2023-27225
A cross-site scripting XSS vulnerability in User Registration & Login and User Management System with Admin Panel v3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the first and last name field...
CVE-2023-27225
A cross-site scripting XSS vulnerability in User Registration & Login and User Management System with Admin Panel v3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the first and last name field...
Cross site scripting
A cross-site scripting XSS vulnerability in User Registration & Login and User Management System with Admin Panel v3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the first and last name field...
CVE-2023-27225
CVE-2023-27225 affects User Registration & Login and User Management System with Admin Panel v3. The vulnerability is a cross-site scripting (XSS) flaw in the first-name and last-name input fields, allowing attackers to inject arbitrary web scripts/HTML. Documented impact is client-side code exec...
CVE-2023-27225
A cross-site scripting XSS vulnerability in User Registration & Login and User Management System with Admin Panel v3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the first and last name field...
CVE-2023-34648
A Cross Site Scripting vulnerability in PHPgurukl User Registration Login and User Management System with admin panel v.1.0 allows a local attacker to execute arbitrary code via a crafted script to the signup.php...
CVE-2023-34648
Vulnerability context: CVE-2023-34648 affects PHPgurukl User Registration Login and User Management System with admin panel v1.0. The issue is a Cross Site Scripting (XSS) in the signup.php endpoint that can let a local attacker execute arbitrary code via a crafted script. The CVSS details indica...