CVE-2020-10399: Improper Neutralization of Input During Web Page Generation

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/add-user.php by adding a question mark ? followed by the payload...

PT-2018-14722

Name of the Vulnerable Software and Affected Versions AbiSoft Ticketly version 1.0 Description The issue allows remote attackers to create administrator accounts. This can be achieved via an action/add user.php POST request, specifically exploiting the add user functionality. Recommendations For...