CVE-2023-27225: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in User Registration & Login and User Management System with Admin Panel v3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the first and last name field...

CVE-2023-34648

A Cross Site Scripting vulnerability in PHPgurukl User Registration Login and User Management System with admin panel v.1.0 allows a local attacker to execute arbitrary code via a crafted script to the signup.php...

CVE-2023-34648: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting vulnerability in PHPgurukl User Registration Login and User Management System with admin panel v.1.0 allows a local attacker to execute arbitrary code via a crafted script to the signup.php...

CVE-2023-34648

Vulnerability context: CVE-2023-34648 affects PHPgurukl User Registration Login and User Management System with admin panel v1.0. The issue is a Cross Site Scripting (XSS) in the signup.php endpoint that can let a local attacker execute arbitrary code via a crafted script. The CVSS details indica...

CVE-2023-33591

User Registration & Login and User Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/search-result.php...

CVE-2023-33591

User Registration & Login and User Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/search-result.php...

CVE-2023-33591: Improper Neutralization of Input During Web Page Generation

User Registration & Login and User Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/search-result.php...

CVE-2023-33591

The CVE-2023-33591 entry concerns the User Registration & Login and User Management System v1.0 with a cross-site scripting (XSS) vulnerability exploitable via the component /admin/search-result.php . The available connected documents confirm the affected product and component but do not provide ...

User Registration & Login and User Management System 跨站脚本漏洞

User Registration & Login and User Management System is a user management system with an administration panel. A security vulnerability exists in User Registration & Login and User Management System v1.0, which originates from cross-site scripting XSS in the component /admin/search-result.php...

ProLogin 1.9 Insecure Direct Object Reference

==================================================================================================================================== | Title : ProLogin V1.9 Insecure Direct Object Reference Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...

User Management System 跨站脚本漏洞

User Management System is a Php User Management System using Stored Procedures by Anuj Kumar Personal Developer. A security vulnerability exists in Phpgurukul User Registration & User Management System version v3.0, which can be exploited by an attacker to conduct a cross-site scripting attack vi...

CVE-2022-43097: Improper Neutralization of Input During Web Page Generation

Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the firstname and lastname parameters of the registration form & login pages...

CVE-2021-29859: Undefined Security Weakness

IBM ICP4A - User Management System Component IBM Cloud Pak for Business Automation V21.0.3 through V21.0.3-IF008, V21.0.2 through V21.0.2-IF009, and V21.0.1 through V21.0.1-IF007 could allow a user with physical access to the system to perform unauthorized actions or obtain sensitive information...

PT-2022-9942

Name of the Vulnerable Software and Affected Versions IBM ICP4A - User Management System Component versions V21.0.1 through V21.0.1-IF007 IBM ICP4A - User Management System Component versions V21.0.2 through V21.0.2-IF009 IBM ICP4A - User Management System Component versions V21.0.3 through...

CVE-2021-26800

Cross Site Request Forgery CSRF vulnerability in Change-password.php in phpgurukul user management system in php using stored procedure V1.0, allows attackers to change the password to an arbitrary account...

CVE-2021-26800

The CVE-2021-26800 entry concerns a CSRF vulnerability in the Change-password.php flow of the PHPgurukul user management system (PHP, using stored procedures, V1.0). Exploitation would enable an attacker to change the password for an arbitrary account, as described in multiple sources. The connec...

PT-2021-17139

Name of the Vulnerable Software and Affected Versions phpgurukul user management system version V1.0 Description The issue concerns a Cross Site Request Forgery CSRF vulnerability in the Change-password.php file of the phpgurukul user management system. This vulnerability allows attackers to chan...

CVE-2021-26800: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability in Change-password.php in phpgurukul user management system in php using stored procedure V1.0, allows attackers to change the password to an arbitrary account...

CVE-2021-43810 Cross-site Scripting (XSS) when redirect an url

Admidio is a free open source user management system for websites of organizations and groups. A cross-site scripting vulnerability is present in Admidio prior to version 4.0.12. The Reflected XSS vulnerability occurs because redirect.php does not properly validate the value of the url parameter...

CVE-2021-43810

CVE-2021-43810 : Admidio prior to 4.0.12 contains a Reflected XSS in redirect.php where the url parameter is not properly validated, enabling execution of malicious scripts in the victim’s browser. Several connected sources confirm this XSS vector and a patch was released in version 4.0.12 to rem...