4 matches found
CVE-2024-48704
CVE-2024-48704 affects Phpgurukul Medical Card Generation System v1.0. The issue is an HTML injection in admin/contactus.php via the pagedes parameter, caused by insufficient input filtering/escaping. Potential for injecting Web script/HTML (per CNVD/CNNVD entries); no exploit details provided in...
CVE-2025-1873
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php...
CVE-2025-1873 SQL injection vulnerability in 101news
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php...
CVE-2023-37746
A cross-site scripting XSS vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter of the /admin/contactus.php component...