School Event Management System security vulnerabilities

School Event Management System is a school event management system. A security vulnerability exists in School Event Management System version 1.0. The vulnerability can be exploited to send a specially crafted JavaScript load to a user to take over their browser session via the "id" and "view in...

School Attendance Monitoring System and School Event Management System have cross-site scripting vulnerabilities

School Event Management System is a school event management system and School Attendance Monitoring System is a school attendance monitoring system. A cross-site scripting vulnerability exists in School Attendance Monitoring System and School Event Management System version 1.0. An attacker can...

Young Entrepreneur E-Negosyo System Cross-site Script Vulnerability

Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System by janobe individual developers. A cross-site scripting vulnerability exists in Young Entrepreneur E-Negosyo System version 1.0. An attacker can create a specially crafted URL and send it to a victim to obtain their...

School Event Management System Cross-site Scripting Vulnerabilities

School Event Management System is a school event management system. A cross-site scripting vulnerability exists in School Event Management System version 1.0. An attacker can create a specially crafted URL and send it to a victim to obtain their session details via the "view" parameter in...

School Event Management System Cross-site Scripting Vulnerabilities

School Event Management System is a school event management system. A cross-site scripting vulnerability exists in School Event Management System version 1.0. An attacker can create a specially crafted URL and send it to a victim to obtain their session details via the "view" parameter in...

School Event Management System Cross-site Scripting Vulnerabilities

School Event Management System is a school event management system. A cross-site scripting vulnerability exists in School Event Management System version 1.0. An attacker can use this vulnerability to send a specially crafted query to the server to retrieve all information stored in...

PT-2024-25617

Name of the Vulnerable Software and Affected Versions School Attendance Monitoring System and School Event Management System version 1.0 Description A Cross-Site Scripting XSS issue exists, allowing an attacker to create a specially crafted URL and send it to a victim. This could lead to the...

PT-2024-25618

Name of the Vulnerable Software and Affected Versions School Attendance Monitoring System and School Event Management System version 1.0 Description A Cross-Site Scripting XSS issue exists, allowing an attacker to create a specially crafted URL and send it to a victim. This could lead to the...

PT-2024-25607 · Unknown · E-Negosyo System

Name of the Vulnerable Software and Affected Versions: E-Negosyo System version 1.0 Description: The issue is a Cross-Site Scripting XSS vulnerability that can be exploited by sending a specially crafted JavaScript payload to an authenticated user, allowing an attacker to partially take over thei...

PT-2024-25622 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Event Management System version 1.0 Description: A Cross-Site Scripting XSS issue exists, allowing an attacker to send a specially crafted javascript payload to an authenticated user, potentially taking over their browser session. This...

PT-2024-25609 · Unknown · E-Negosyo System

Name of the Vulnerable Software and Affected Versions: E-Negosyo System version 1.0 Description: The issue is related to a Cross-Site Scripting XSS vulnerability. An attacker could create a specially crafted URL and send it to a victim to obtain their session cookie details via the view parameter...

PT-2024-25623 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Event Management System version 1.0 Description: A Cross-Site Scripting XSS issue affects the system, allowing an attacker to exploit it by sending a specially crafted query to the server. This can lead to the retrieval of all stored...

PT-2024-25597 · Paypal · Paypal

Name of the Vulnerable Software and Affected Versions: Payment system versions 1.0 Description: A SQL injection issue affects the PayPal, Credit Card, and Debit Card Payment system. An attacker could exploit this by sending a specially crafted query to the server, allowing them to retrieve all...

PT-2024-25625 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Event Management System version 1.0 Description: The issue is related to a Cross-Site Scripting XSS vulnerability. An attacker could create a specially crafted URL and send it to a victim to obtain their session details via the view...

PT-2024-25624 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Event Management System version 1.0 Description: A Cross-Site Scripting XSS issue affects the system, allowing an attacker to exploit it by sending a specially crafted query to the server. This can lead to the retrieval of all stored...

CVE-2024-33985: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'View' parameter in '/course/index.php...

CVE-2024-33986: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'View' parameter in...

CVE-2024-33990: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted javascript payload to an authenticated user and partially take over their browser session via the 'id' and 'view' parameters ...

CVE-2024-33991: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the 'view' parameter in '/eventwinner/index.php'...

CVE-2024-33992: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the 'view' parameter in '/student/index.php'...