CVE-2025-7928

A vulnerability was found in code-projects Church Donation System 1.0 and classified as critical. This issue affects some unknown processing of the file /members/edituser.php. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2022-23873

Victor CMS v1.0 was discovered to contain a SQL injection vulnerability that allows attackers to inject arbitrary commands via 'userfirstname' parameter...

PT-2022-16305

Name of the Vulnerable Software and Affected Versions Victor CMS version 1.0 Description The issue allows attackers to inject arbitrary commands via the user firstname parameter, potentially leading to unauthorized access or data manipulation. Recommendations For Victor CMS version 1.0, consider...

PT-2022-12718

Name of the Vulnerable Software and Affected Versions Victor CMS version 1.0 Description The issue concerns SQL injection vulnerabilities found in the admin/users.php component, specifically when the source parameter is set to add user. These vulnerabilities can be exploited through a crafted POS...

PT-2020-14523

Name of the Vulnerable Software and Affected Versions Victor CMS through 2019-02-28 Description The issue allows for XSS attacks via the register.php user firstname or user lastname field. Recommendations For Victor CMS through 2019-02-28, consider disabling the register.php page or restricting...

PT-2020-13534

Name of the Vulnerable Software and Affected Versions Victor CMS version 1.0 Description The issue is related to Persistent XSS in the "admin/users.php?source=add user" endpoint via the user name, user firstname, or user lastname parameters. Recommendations For Victor CMS version 1.0, as a...

CVE-2012-6556

Multiple cross-site scripting XSS vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the 1 User/FirstName or 2 User/LastName parameter to the edit user page. NOTE: some of these details are obtained from third...

CVE-2012-6556: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the 1 User/FirstName or 2 User/LastName parameter to the edit user page. NOTE: some of these details are obtained from third...

PT-2013-2010

Name of the Vulnerable Software and Affected Versions FirstLastNames plugin version 1.1.1 for Vanilla Forums Description The issue allows remote attackers to inject arbitrary web script or HTML via the User/FirstName or User/LastName parameter to the edit user page, potentially leading to...