566 matches found
Impress CMS 1.3.9 Open Redirection
==================================================================================================================================== | Title : impress CMS v1.3.9 Open Redirect vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 63.0.3 32-bit ...
Sql injection
A vulnerability classified as critical was found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this vulnerability is an unknown functionality of the file vm\patient\edit-user.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to...
CVE-2023-4444: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this vulnerability is an unknown functionality of the file vm\patient\edit-user.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to...
emlog SQL Injection Vulnerability
emlog is a PHP and MySQL based CMS builder for emlog personal developers. A SQL injection vulnerability exists in emlog version 2.1.9, which stems from the lack of validation of externally entered SQL statements in the file /admin/user.php. An attacker can exploit this vulnerability to execute...
Sql injection
emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...
CVE-2023-39121
CVE-2023-39121 affects emlog version 2.1.9. A SQL injection vulnerability exists in emlog’s admin/user.php handling and also, per the Nuclei template, in the data backup/restore functionality due to unsanitized input. Impact: attackers with admin credentials could potentially execute arbitrary SQ...
CVE-2023-39121
emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...
CVE-2023-39121: Improper Neutralization of Special Elements used in an SQL Command
emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...
CVE-2023-39121
emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...
CMSUsina 2.2.3 Cross Site Request Forgery
==================================================================================================================================== | Title : CMSUsina V2.2.3 CSRF Add Admin Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 66.0.332-bit | |...
Denial Of Service (DoS)
getkirby/cms is vulnerable to Denial of Service. The vulnerability exists in the validatePassword function in User.php because it does not limit the password length, which can cause CPU and memory resource exhaustion when hashing if the attacker submits a password thats the the max size of a...
Cross site scripting
A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file user.php of the component HTTP POST Request Handler. The manipulation of the argument title leads to cross site...
CVE-2023-3465
CVE-2023-3465 affects SimplePHPscripts Classified Ads Script 1.8. The vulnerability resides in the HTTP POST Request Handler, specifically the file user.php, where manipulating the title argument enables cross-site scripting. Attacks are described as remotely explitable. The recommended fix is up...
SimplePHPscripts Classified Ads Script 跨站脚本漏洞
SimplePHPscripts Classified Ads Script is an advertisement tool that can be embedded in websites. A cross-site scripting vulnerability exists in SimplePHPscripts Classified Ads Script version 1.8, which stems from an issue with the file user.php, where manipulation of the parameter title can lead...
CVE-2023-3465: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file user.php of the component HTTP POST Request Handler. The manipulation of the argument title leads to cross site...
Cross-site Scripting (XSS)
thorsten/phpmyfaq is vulnerable to Cross-site Scripting XSS. The vulnerability exists in user.php because the username parameter is not properly sanitized which allows an attacker to inject and execute arbitrary javascript...
Information Exposure
microweber/microweber, is vulnerable to information exposure. The vulnerability exists in User.php, allowing an attacker to read sensitive information in the system...
Privilege Escalation
thorsten/phpmyfaq is vulnerable to Privilege Escalation. The vulnerability exists because of the insufficient permission checks in the user.php, which allows an attacker to gain escalated privilege through the isSuperAdmin feature...
