CVE-2023-33591

User Registration & Login and User Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/search-result.php...

CVE-2023-33591

The CVE-2023-33591 entry concerns the User Registration & Login and User Management System v1.0 with a cross-site scripting (XSS) vulnerability exploitable via the component /admin/search-result.php . The available connected documents confirm the affected product and component but do not provide ...

User Registration & Login and User Management System 跨站脚本漏洞

User Registration & Login and User Management System is a user management system with an administration panel. A security vulnerability exists in User Registration & Login and User Management System v1.0, which originates from cross-site scripting XSS in the component /admin/search-result.php...

ProLogin 1.9 Insecure Direct Object Reference

==================================================================================================================================== | Title : ProLogin V1.9 Insecure Direct Object Reference Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...

User Management System 跨站脚本漏洞

User Management System is a Php User Management System using Stored Procedures by Anuj Kumar Personal Developer. A security vulnerability exists in Phpgurukul User Registration & User Management System version v3.0, which can be exploited by an attacker to conduct a cross-site scripting attack vi...

CVE-2021-26800

Cross Site Request Forgery CSRF vulnerability in Change-password.php in phpgurukul user management system in php using stored procedure V1.0, allows attackers to change the password to an arbitrary account...

CVE-2021-26800

The CVE-2021-26800 entry concerns a CSRF vulnerability in the Change-password.php flow of the PHPgurukul user management system (PHP, using stored procedures, V1.0). Exploitation would enable an attacker to change the password for an arbitrary account, as described in multiple sources. The connec...

CVE-2021-43810 Cross-site Scripting (XSS) when redirect an url

Admidio is a free open source user management system for websites of organizations and groups. A cross-site scripting vulnerability is present in Admidio prior to version 4.0.12. The Reflected XSS vulnerability occurs because redirect.php does not properly validate the value of the url parameter...

CVE-2021-43810

CVE-2021-43810 : Admidio prior to 4.0.12 contains a Reflected XSS in redirect.php where the url parameter is not properly validated, enabling execution of malicious scripts in the victim’s browser. Several connected sources confirm this XSS vector and a patch was released in version 4.0.12 to rem...

CVE-2020-23051

CVE-2020-23051 involves Phpgurukul User Registration & User Management System v2.0 with multiple stored cross-site scripting (XSS) vulnerabilities. The flaws are exploitable via the firstname and lastname parameters of the registration form and the loginsystem input fields. The public documents i...

CVE-2021-32630

Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.0.4, there is an authenticated RCE via .phar file upload. A php web shell can be uploaded via the Documents & Files upload feature. Someone with upload permissions could...

CVE-2021-32630

CVE-2021-32630 affects Admidio prior to version 4.0.4, where an authenticated user with upload permissions can exploit the Documents & Files upload feature to achieve remote code execution via a .phar-renamed PHP web shell. The payload can trigger a reverse or bind shell when the uploaded file is...

Cross site request forgery (csrf)

A Cross Site Request Forgery CSRF vulnerability exists in the loginsystem page in PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1...

CVE-2020-26766

A Cross Site Request Forgery CSRF vulnerability exists in the loginsystem page in PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1...

User Registration & Login and User Management System 2.1 - Cross Site Request Forgery

Exploit Title: User Registration & Login and User Management System 2.1 - Cross Site Request Forgery Exploit Author: Dipak Panchalth3.d1p4k Vendor Homepage: https://phpgurukul.com Software Link: http://user-registration-login-and-user-management-system-with-admin-panel Version: 5 Tested on Window...

Cross site scripting

Cross Site Scripting XSS vulnerability in the Registration page of the admin panel in PHPGurukul User Registration & Login and User Management System With admin panel 2.1...

CVE-2020-24723

CVE-2020-24723 affects PHPGurukul Admin Panel: User Registration & Login / User Management System with admin panel version 2.1. A cross-site scripting (XSS) vulnerability exists on the Registration page. The connected Red Hat advisory and other sources corroborate an XSS issue in this admin-panel...

Phpgurukul User Registration Login Management System Cross-Site Scripting Vulnerability

Phpgurukul User Registration Login Management System is a website builder for user management by the PHPGurukul team. A cross-site scripting vulnerability exists in PHPGurukul User Registration & Login and User Management System admin panel version 2.1, which stems from a cross-site scripting...

CVE-2020-25952

SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication...

Sql injection

SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication...