CVE-2012-3837

Multiple cross-site scripting XSS vulnerabilities in apps/users/registration.template.php in Baby Gekko 1.2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 emailaddress, 3 password, 4 passwordverify, 5 firstname, 6 lastname, or 7 verificationcode...

CVE-2016-20005

The REST/JSON project 7.x-1.x for Drupal allows user registration bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy...

CVE-2005-4007

Multiple unspecified vulnerabilities in SAPID CMS before 1.2.3.03, related to newly registered users and possibly authorization checks, have unknown impact and attack vectors involving 1 mvc/controller/userrequestanalysis.inc.php and 2 usr/xml/ddc/authorization.xml...

CVE-2006-5169

Cross-site scripting XSS vulnerability in John Himmelman aka DaRk2k1 PowerPortal 1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to registering a user. NOTE: the provenance of this information is unknown; the details are obtained from...

CVE-2005-1654

Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and password parameters set...

The Front End User Registration extension for TYPO3 (sr_feuser_register) Remote Code Execution

The srfeuserregister extension through 12.4.8 for TYPO3 allows Remote Code Execution via unsafe deserialization...

GHSA-CVGC-MX2W-H3W8 The Front End User Registration extension for TYPO3 (sr_feuser_register) allows Insecure Direct Object Reference

The srfeuserregister extension through 12.4.8 for TYPO3 allows Insecure Direct Object Reference. This allows attackers to read arbitrary files...

CVE-2025-4889

A vulnerability has been found in code-projects Tourism Management System 1.0 and classified as critical. This vulnerability affects the function AddUser of the component User Registration. The manipulation of the argument username/password leads to buffer overflow. Local access is required to...

WordPress PSW Front-end Login Registration 1.12 User Registration

WordPress PSW Front-end Login Registration plugin versions 1.12 and below suffers from a vulnerability that allows an unauthenticated attacker to register new user accounts via an exposed AJAX action without proper validation or restrictions...

CVE-2025-4934

A vulnerability has been found in PHPGurukul User Registration & Login and User Management System 3.3 and classified as critical. This vulnerability affects unknown code of the file /edit-profile.php. The manipulation of the argument Contact leads to sql injection. The attack can be initiated...

CVE-2025-4934 PHPGurukul User Registration & Login and User Management System edit-profile.php sql injection

A vulnerability has been found in PHPGurukul User Registration & Login and User Management System 3.3 and classified as critical. This vulnerability affects unknown code of the file /edit-profile.php. The manipulation of the argument Contact leads to sql injection. The attack can be initiated...

CVE-2025-4931

A vulnerability classified as critical was found in projectworlds Online Lawyer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /userregistation.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. T...

CVE-2025-4931 projectworlds Online Lawyer Management System user_registation.php sql injection

A vulnerability classified as critical was found in projectworlds Online Lawyer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /userregistation.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. T...

Projectworlds Online Lawyer Management System SQL注入漏洞

Projectworlds Online Lawyer Management System is an online lawyer management system from Projectworlds India. A security vulnerability exists in Projectworlds Online Lawyer Management System version 1.0, which originates from an SQL injection due to the manipulation of the parameter email in the...

CVE-2025-4889

A vulnerability has been found in code-projects Tourism Management System 1.0 and classified as critical. This vulnerability affects the function AddUser of the component User Registration. The manipulation of the argument username/password leads to buffer overflow. Local access is required to...

CVE-2025-4889 code-projects Tourism Management System User Registration AddUser buffer overflow

A vulnerability has been found in code-projects Tourism Management System 1.0 and classified as critical. This vulnerability affects the function AddUser of the component User Registration. The manipulation of the argument username/password leads to buffer overflow. Local access is required to...

CVE-2025-4889 code-projects Tourism Management System User Registration AddUser buffer overflow

A vulnerability has been found in code-projects Tourism Management System 1.0 and classified as critical. This vulnerability affects the function AddUser of the component User Registration. The manipulation of the argument username/password leads to buffer overflow. Local access is required to...

CVE-2025-4889

CVE-2025-4889 affects code-projects Tourism Management System 1.0, specifically the AddUser function in the User Registration component. The vulnerability is a buffer overflow caused by manipulating the username and password arguments, requiring local access. The CVE notes that the exploit has be...

Code-Projects Tourism Management System 安全漏洞

Code-Projects Tourism Management System is an open source tourism management system from Code-Projects. A security vulnerability exists in Code-Projects Tourism Management System version 1.0, which is caused by a buffer overflow due to incorrect manipulation of the username/password parameters in...

PT-2025-21857 · Unknown · Code-Projects Courier Management System

Name of the Vulnerable Software and Affected Versions: code-projects Tourism Management System version 1.0 Description: A critical vulnerability has been found in the code-projects Tourism Management System. This issue affects the AddUser function of the User Registration component. The...