CVE-2024-2769: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in Campcodes Complete Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument adminname/email results in sql injection. The attack may be launched remotely. The...

CVE-2024-2719 Campcodes Complete Online DJ Booking System admin-profile.php cross site scripting

A vulnerability classified as problematic has been found in Campcodes Complete Online DJ Booking System 1.0. Affected is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely...

CVE-2024-2719: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Campcodes Complete Online DJ Booking System 1.0. Affected is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely...

PT-2024-21725

Name of the Vulnerable Software and Affected Versions Campcodes Complete Online DJ Booking System version 1.0 Description A problematic issue has been found in the software. The manipulation of the adminname argument in the file /admin/admin-profile.php leads to cross site scripting. It is possib...

CVE-2023-31934

Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the adminname parameter of admin-profile.php...

Cross site scripting

Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the emial parameter of admin-profile.php...

CVE-2023-31934: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the adminname parameter of admin-profile.php...

CVE-2023-31935: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the emial parameter of admin-profile.php...

CVE-2023-31935

CVE-2023-31935 affects Rail Pass Management System v1.0. A Cross Site Scripting vulnerability exists in the emial parameter of admin-profile.php, enabling a remote attacker to obtain sensitive information. The Red Hat, NVD, CVE lists, and related sources in the connected documents confirm the bas...

CVE-2023-31934

CVE-2023-31934 is a Cross-Site Scripting vulnerability affecting Rail Pass Management System v1.0, enabling a remote attacker to exfiltrate sensitive data via the adminname parameter in admin-profile.php. The Red Hat, NVD, CVE list, PRION, CNNVD, and PT-Security entries consistently describe an X...

Cross site scripting

A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. The attack may be...

CVE-2023-3888 Campcodes Beauty Salon Management System admin-profile.php cross site scripting

A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. The attack may be...

CVE-2023-3888 Campcodes Beauty Salon Management System admin-profile.php cross site scripting

A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. The attack may be...

CVE-2023-3874

CVE-2023-3874 affects Campcodes Beauty Salon Management System 1.0. The vulnerability is an SQL injection in the unknown function of the file /admin/admin-profile.php, triggered by manipulating the adminname parameter. It is exploitable remotely, with multiple sources indicating the exploit has b...

PT-2023-26579 · Unknown · Campcodes Beauty Salon Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /admin/admin-profile.php. The manipulation of the adminname argument leads to sql injection...

CVE-2023-3888: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. The attack may be...

CVE-2023-3874: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Campcodes Beauty Salon Management System 1.0. Affected is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to sql injection. It is possible to launch the attack remotely. The...

Privilege escalation

AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the component /admin/profile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-38305

AeroCMS v0.0.1 is affected by an arbitrary file upload vulnerability in the /admin/profile.php component. The underlying issue allows an attacker to upload a crafted PHP file, enabling arbitrary code execution on the server. CVSS 3.1 base score 8.8 (HIGH) with network attack vector, low attack co...

CVE-2022-38305: Unrestricted Upload of File with Dangerous Type

AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the component /admin/profile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...