407 matches found
CVE-2024-0652
The CVE-2024-0652 entry concerns PHPGurukul’s Company Visitor Management System 1.0 and a vulnerability in the file search-visitor.php that allows cross-site scripting. The issue is triggered by insufficient input filtering/escaping, with remote exploitation and a publicly disclosed exploit. Affe...
CVE-2024-0650
A vulnerability was found in Project Worlds Visitor Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file dataset.php of the component URL Handler. The manipulation of the argument name with the input "alert'torada' leads to cross site scripting...
CVE-2024-0650
A vulnerability was found in Project Worlds Visitor Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file dataset.php of the component URL Handler. The manipulation of the argument name with the input "alert'torada' leads to cross site scripting...
Cross site scripting
A vulnerability was found in Project Worlds Visitor Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file dataset.php of the component URL Handler. The manipulation of the argument name with the input "alert'torada' leads to cross site scripting...
CVE-2024-0651 PHPGurukul Company Visitor Management System search-visitor.php sql injection
A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file search-visitor.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has...
CVE-2024-0651 PHPGurukul Company Visitor Management System search-visitor.php sql injection
A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file search-visitor.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has...
CVE-2024-0651
The CVE-2024-0651 entry concerns PHPGurukul Company Visitor Management System 1.0, where an SQL injection is triggered in an unknown functionality of search-visitor.php due to insufficient input validation. The vulnerability is exploitable remotely, with exploits disclosed publicly (VDB-251377). ...
PHPGurukul Company Visitor Management System 安全漏洞
Company Visitor Management System is a visitor management system. Company Visitor Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the file search-visitor.php. An attacker can exploit this vulnerability to...
PHPGurukul Company Visitor Management System 跨站脚本漏洞
Company Visitor Management System is a visitor management system. Company Visitor Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the file search-visitor.php, which can be exploited by an...
CVE-2024-0650
CVE-2024-0650 affects Project Worlds Visitor Management System 1.0, specifically the URL Handler’s dataset.php. The vulnerability is a reflected XSS caused by manipulating the argument name (example input: >""), which can be exploited remotely and has been disclosed publicly. Multiple sources ...
PT-2024-15718 · Unknown · Phpgurukul Company Visitor Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Company Visitor Management System version 1.0 Description: A critical issue was found in the PHPGurukul Company Visitor Management System, affecting an unknown functionality of the file search-visitor.php. This issue leads to sql...
Visitor Management System Cross-Site Scripting Vulnerability
Visitor Management System is a visitor management system. A cross-site scripting vulnerability exists in Project Worlds Visitor Management System version 1.0, which stems from a cross-site scripting XSS vulnerability in the file dataset.php...
PT-2024-15717 · Unknown · Projectworlds Visitor Management System
Name of the Vulnerable Software and Affected Versions: Project Worlds Visitor Management System version 1.0 Description: A vulnerability was found in the Project Worlds Visitor Management System. It has been classified as problematic and affects an unknown function of the file dataset.php of the...
Visitor Management System SQL Injection Vulnerability
Visitor Management System is a visitor management system. A SQL injection vulnerability exists in Visitor Management System v1.0, which originates from the parameter id of manageuser.php that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to...
CVE-2023-5918
A vulnerability, which was classified as critical, was found in SourceCodester Visitor Management System 1.0. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of thi...
Sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Visitor Management System 1.0. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of thi...
CVE-2023-5918 SourceCodester Visitor Management System manage_user.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Visitor Management System 1.0. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of thi...
CVE-2023-5918 SourceCodester Visitor Management System manage_user.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Visitor Management System 1.0. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of thi...
CVE-2023-5918
CVE-2023-5918 affects SourceCodester Visitor Management System v1.0. The vulnerability is an SQL injection arising from the manipulation of the id parameter in the file manage_user.php , allowing remote exploitation. Multiple connected sources corroborate this as a critical issue with unauthentic...
PT-2023-32417 · Sourcecodester · Sourcecodester Stock Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Visitor Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Visitor Management System. The issue affects an unknown function of the file manage user.php. The manipulation of the i...