Lucene search
+L

22 matches found

NVD
NVD
•added 2026/09/20 10:16 a.m.•15 views

CVE-2026-93976

A vulnerability was found in code-projects Assessment Management 1.0. Affected is an unknown function of the file admin/add-user.php. The manipulation of the argument level results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used...

4.8CVSS0.00368EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/20 10:00 a.m.•16 views

EUVD-2026-83719

A vulnerability was found in code-projects Assessment Management 1.0. Affected is an unknown function of the file admin/add-user.php. The manipulation of the argument level results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used...

4.8CVSS3.8AI score0.00368EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/20 10:00 a.m.•54 views

CVE-2026-93976 code-projects Assessment Management add-user.php cross site scripting

A vulnerability was found in code-projects Assessment Management 1.0. Affected is an unknown function of the file admin/add-user.php. The manipulation of the argument level results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used...

4.8CVSS0.00368EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/20 10:00 a.m.•15 views

CVE-2026-93976 code-projects Assessment Management add-user.php cross site scripting

A vulnerability was found in code-projects Assessment Management 1.0. Affected is an unknown function of the file admin/add-user.php. The manipulation of the argument level results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used...

4.8CVSS3.8AI score0.00368EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/20 10:00 a.m.•27 views

CVE-2026-93976

CVE-2026-93976 is a cross-site scripting (XSS) vulnerability in code-projects Assessment Management 1.0 , located in the file admin/add-user.php . Manipulation of the level argument leads to XSS, and the attack can be launched remotely. Exploitation requires high privileges and user interaction ,...

4.8CVSS3.8AI score0.00368EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/20 12:00 a.m.•5 views

PT-2026-95949

Name of the Vulnerable Software and Affected Versions code-projects Assessment Management version 1.0 Description Cross site scripting occurs in the file admin/add-user.php due to the manipulation of the level argument. This issue allows a remote attack to be launched. Recommendations Avoid using...

4.8CVSS5.5AI score0.00368EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/20 12:00 a.m.•5 views

CVE-2026-93976: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Assessment Management 1.0. Affected is an unknown function of the file admin/add-user.php. The manipulation of the argument level results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used...

4.8CVSS3.8AI score0.00368EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-16885

Malicious code in bioql PyPI...

6.1CVSS5AI score0.00415EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/31 12:00 a.m.•4 views

CVE-2024-13069: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Multi Role Login System 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/add-user.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. Th...

5.4CVSS4AI score0.00433EPSS
SaveExploits1References1
NVD
NVD
•added 2024/03/20 10:15 p.m.•62 views

CVE-2024-24050

Cross Site Scripting XSS vulnerability in Sourcecodester Workout Journal App 1.0 allows attackers to run arbitrary code via parameters firstname and lastname in /add-user.php...

4.7CVSS5.9AI score0.00443EPSS
SaveExploits4References1
Cvelist
Cvelist
•added 2024/03/20 12:00 a.m.•67 views

CVE-2024-24050

Cross Site Scripting XSS vulnerability in Sourcecodester Workout Journal App 1.0 allows attackers to run arbitrary code via parameters firstname and lastname in /add-user.php...

6.1AI score0.00443EPSS
SaveExploits4References1
Vulnrichment
Vulnrichment
•added 2024/03/20 12:00 a.m.•14 views

CVE-2024-24050

Cross Site Scripting XSS vulnerability in Sourcecodester Workout Journal App 1.0 allows attackers to run arbitrary code via parameters firstname and lastname in /add-user.php...

6.4AI score0.00443EPSS
SaveExploits4References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•4 views

CVE-2024-24050: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Sourcecodester Workout Journal App 1.0 allows attackers to run arbitrary code via parameters firstname and lastname in /add-user.php...

4.7CVSS6.1AI score0.00443EPSS
SaveExploits4References2
Prion
Prion
•added 2024/01/31 7:15 p.m.•35 views

Cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Login System 1.0. Affected by this issue is some unknown functionality of the file add-user.php. The manipulation of the argument qr-code leads to cross site scripting. The attack may be launched...

5CVSS6.7AI score0.00415EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/01/31 7:00 p.m.•124 views

CVE-2024-1111 SourceCodester QR Code Login System add-user.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Login System 1.0. Affected by this issue is some unknown functionality of the file add-user.php. The manipulation of the argument qr-code leads to cross site scripting. The attack may be launched...

5CVSS6.3AI score0.00415EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/31 12:00 a.m.•1 views

CVE-2024-1111: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Login System 1.0. Affected by this issue is some unknown functionality of the file add-user.php. The manipulation of the argument qr-code leads to cross site scripting. The attack may be launched...

6.1CVSS4AI score0.00415EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/02 12:00 a.m.•2 views

CVE-2023-6464: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester User Registration and Login System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument user leads to sql injection. The attack may be launched remotely...

9.8CVSS6.6AI score0.00796EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/01 12:00 a.m.•2 views

CVE-2023-6463: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester User Registration and Login System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument firstname leads to cross site scripting. The attac...

5.4CVSS3.6AI score0.00604EPSS
SaveExploits1References2
Prion
Prion
•added 2020/03/12 2:15 p.m.•27 views

Cross site scripting

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/add-user.php by adding a question mark ? followed by the payload...

3.5CVSS4.9AI score0.00611EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2020/03/12 1:03 p.m.•47 views

CVE-2020-10399

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/add-user.php by adding a question mark ? followed by the payload...

5AI score0.00611EPSS
SaveExploits1References2
Rows per page
Query Builder