CVE-2023-7131

A vulnerability was found in code-projects Intern Membership Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /userregistration/ of the component User Registration. The manipulation of the argument userName leads to sql injection...

CVE-2023-7128

A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown processing of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to th...

CVE-2023-7128

CVE-2023-7128 affects code-projects Voting System 1.0, specifically the Admin Login component’s /admin/ path. The issue arises from manipulating the username argument, resulting in SQL injection in an unknown processing flow of the Admin Login. Public disclosure exists. The CVSS data in the sourc...

CVE-2023-7126

A vulnerability classified as critical has been found in code-projects Automated Voting System 1.0. This affects an unknown part of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to the public and may...

CVE-2023-7138: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Client Details System 1.0. This affects an unknown part of the file /admin of the component HTTP POST Request Handler. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to...

CVE-2023-7132: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Intern Membership Management System 2.0. It has been classified as problematic. This affects an unknown part of the file /userregistration/ of the component User Registration. The manipulation of the argument userName/firstName/lastName/userEmail with th...

CVE-2023-7131: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Intern Membership Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /userregistration/ of the component User Registration. The manipulation of the argument userName leads to sql injection...

CVE-2023-7128: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown processing of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to th...

CVE-2023-7126: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Automated Voting System 1.0. This affects an unknown part of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to the public and may...

PT-2023-23288 · Unknown · Sesami Cash Point & Transport Optimizer

Name of the Vulnerable Software and Affected Versions: Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 Description: The issue allows remote attackers to execute arbitrary code and obtain sensitive information via the Username field of the login form and application log. This is a...

PT-2023-32893

Name of the Vulnerable Software and Affected Versions code-projects Intern Membership Management System version 2.0 Description A vulnerability was found in the code-projects Intern Membership Management System, affecting an unknown part of the file /user registration/ of the component User...

PT-2023-11750 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4.0 Description: A Cross-Site Scripting XSS vulnerability was discovered in the Hospital Management System, allowing an attacker to execute arbitrary web scripts or HTML code via a malicious payload appended...

Exploit for Server-Side Request Forgery in Naviwebs Navigate_Cms

It is an exploit module targeting Apache HTTP Server. The targe...

CVE-2023-7109: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Library Management System 2.0. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been...

IBM Security Guardium Input Validation Error Vulnerability (CNVD-2023-10112241)

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. An input validation error vulnerability exists in IBM...

CVE-2023-47527

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sajjad Hossain Sagor WP Edit Username allows Stored XSS.This issue affects WP Edit Username: from n/a through 1.0.5...

CVE-2023-47527

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sajjad Hossain Sagor WP Edit Username allows Stored XSS.This issue affects WP Edit Username: from n/a through 1.0.5...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sajjad Hossain Sagor WP Edit Username allows Stored XSS.This issue affects WP Edit Username: from n/a through 1.0.5...

CVE-2023-47527

CVE-2023-47527 involves the WP Edit Username WordPress plugin and is a stored cross-site scripting (XSS) vulnerability caused by improper input neutralization during web page generation. Affected versions are listed as from n/a through 1.0.5. The connected Red Hat CVE record (RH:CVE-2023-47527) c...

CVE-2023-47527: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sajjad Hossain Sagor WP Edit Username allows Stored XSS.This issue affects WP Edit Username: from n/a through 1.0.5...