CVE-2023-1151

A vulnerability was found in SourceCodester Electronic Medical Records System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file administrator.php of the component Cookie Handler. The manipulation of the argument userid leads to sql...

CVE-2023-1151

A vulnerability was found in SourceCodester Electronic Medical Records System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file administrator.php of the component Cookie Handler. The manipulation of the argument userid leads to sql...

CVE-2023-1151

CVE-2023-1151 affects SourceCodester Electronic Medical Records System 1.0, specifically the Cookie Handler’s administrator.php. The vulnerability arises from manipulating the userid parameter, causing SQL injection via a functionality exposed in that file. It is exploitable remotely, and the exp...

CVE-2023-1151: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Electronic Medical Records System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file administrator.php of the component Cookie Handler. The manipulation of the argument userid leads to sql...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in administrator.php in Epignosis eFront Open Source Edition before 3.6.15.3 build 18022 allow remote attackers to hijack the authentication of administrators for requests that 1 delete modules via the deletemodule parameter, 2 deactivate...

PT-2015-5348

Name of the Vulnerable Software and Affected Versions Epignosis eFront Open Source Edition versions prior to 3.6.15.3 build 18022 Description The issue allows remote attackers to hijack the authentication of administrators for various requests, including deleting, deactivating, or activating...

CVE-2015-1559: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in administrator.php in Epignosis eFront Open Source Edition before 3.6.15.3 build 18022 allow remote attackers to hijack the authentication of administrators for requests that 1 delete modules via the deletemodule parameter, 2 deactivate...

CVE-2013-7194: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in www/administrator.php in eFront 3.6.14 build 18012 allow remote authenticated administrators to inject arbitrary web script or HTML via the 1 Last name, 2 Lesson name, or 3 Course name field...

PT-2013-6294

Name of the Vulnerable Software and Affected Versions eFront version 3.6.14 build 18012 Description The issue allows remote authenticated administrators to inject arbitrary web script or HTML via the Last name, Lesson name, or Course name field in the www/administrator.php file. This can be...

CVE-2012-1048: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in communityplusplus/www/administrator.php in eFront Community++ edition 3.6.10, and possibly other editions, allows remote attackers to inject arbitrary web script or HTML via the filter parameter...

PT-2012-3039

Name of the Vulnerable Software and Affected Versions eFront Community++ edition version 3.6.10 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the filter parameter in the /www/administrator.php endpoint. This could potentially lead ...

Multiple vulnerabilities in Efront

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Efront, which can be exploited to perform SQL injection and cross-site scripting attacks. 1 Cross-Site scripting XSS vulnerabilities in Efront 1.1 Input passed via the "course" GET parameter to index.php is not...

osCSS 1.2.1 Changer Login and Pass CSRF Vulnerability

Exploit for php platform in category web applications ===================================================== osCSS 1.2.1 Changer Login and Pass CSRF Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...

CVE-2007-6414: Undefined Security Weakness

admin/administrator.php in Adult Script 1.6 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to bypass authentication and obtain administrative credentials via a direct request. NOTE: this can be leveraged for arbitrary code execution through a...