PT-2024-34483 · Unknown · Sourcecodester Simple Inventory System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Inventory System version 1.0 Description: A critical issue has been found in the SourceCodester Simple Inventory System, affecting an unknown functionality of the file login.php. The manipulation of the username argument...

Online Course Registration System 安全漏洞

Online Course Registration System is an online course registration system by the individual developer ANUJ KUMAR. A security vulnerability exists in PHPGurukul Online Course Registration System version 3.1, which originates from the parameters username/password in the file /admin/index.php that c...

Konga is vulnerable to Cross Site Scripting (XSS) attacks

Konga v0.14.9 is vulnerable to Cross Site Scripting XSS via the username parameter...

GHSA-93PF-MRC8-4G3H Konga is vulnerable to Cross Site Scripting (XSS) attacks

Konga v0.14.9 is vulnerable to Cross Site Scripting XSS via the username parameter...

CVE-2024-34243

Konga v0.14.9 is vulnerable to Cross Site Scripting XSS via the username parameter...

CVE-2024-4822

Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the username and password parameters in '/index.php'. This vulnerability allows an attacker to partially take control of the victim's browser session...

CVE-2024-34243

Konga v0.14.9 is vulnerable to Cross Site Scripting XSS via the username parameter...

CVE-2024-34243

CVE-2024-34243 affects Konga v0.14.9 with Cross-Site Scripting (XSS) via the username parameter. The linked sources indicate the underlying issue is inadequate input validation on the username field, enabling injected scripts. The CVE is recorded with a CVSS v3.1 base score of 5.4 (Medium) and sh...

CVE-2024-34243

Konga v0.14.9 is vulnerable to Cross Site Scripting XSS via the username parameter...

Web-School ERP 跨站脚本漏洞

Web-School ERP is an application from Web-School India, Inc. An ERP application. A cross-site scripting vulnerability exists in Web-School ERP version 1.0, which stems from a cross-site scripting vulnerability in the username and password parameters of the /index.php page...

Laundry Management System 跨站脚本漏洞

Laundry Management System is a laundry management system. A cross-site scripting vulnerability exists in Online Laundry Management System version 1.0, which originates from a cross-site scripting vulnerability in the name/customername/username parameter of the /ajax.php file...

PT-2024-25763 · Konga · Konga

Name of the Vulnerable Software and Affected Versions: Konga version 0.14.9 Description: The issue allows for Cross Site Scripting XSS via the username parameter. Recommendations: For Konga version 0.14.9, avoid using the username parameter until the issue is resolved...

PT-2024-33031 · Unknown · School Erp Pro+Responsive

Name of the Vulnerable Software and Affected Versions: School ERP Pro+Responsive version 1.0 Description: The issue allows an attacker to partially take control of the victim's browser session through a cross-site scripting XSS attack. This is achieved by exploiting the username and password...

CVE-2024-25290

An issue in Casa Systems NL1901ACV R6B032 allows a remote attacker to execute arbitrary code via the userName parameter of the add function...

Casa Systems NL1901ACV 安全漏洞

Casa Systems NL1901ACV is a wireless router from Casa Systems, USA. A security vulnerability exists in Casa Systems NL1901ACV versions prior to R6B032 that originates from a vulnerability that allows a remote attacker to execute arbitrary code via the userName parameter of the add function...

PT-2024-20864 · Casa Systems · Casa Systems Nl1901Acv

Name of the Vulnerable Software and Affected Versions: Casa Systems NL1901ACV version R6B032 Description: An issue allows a remote attacker to execute arbitrary code via the userName parameter of the add function. Recommendations: For Casa Systems NL1901ACV version R6B032, avoid using the userNam...

CVE-2024-25290

An issue in Casa Systems NL1901ACV R6B032 allows a remote attacker to execute arbitrary code via the userName parameter of the add function...

CVE-2024-3167

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘twitterusername’ parameter in versions up to, and including, 2.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...

Emergency Ambulance Hiring Portal login.php File SQL Injection Vulnerability

Emergency Ambulance Hiring Portal is an emergency ambulance hiring portal. Emergency Ambulance Hiring Portal suffers from a SQL injection vulnerability that arises from a lack of validation of an externally-entered SQL statement in the username parameter of the file /admin/login.php of the...

Internship Portal Management System SQL注入漏洞

Internship Portal Management System is an internship portal management system by the individual developer ChatikoboL. A SQL injection vulnerability exists in Internship Portal Management System version 1.0, which originates from a SQL injection vulnerability in the name/username/password paramete...