57 matches found
CVE-2025-4164: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in PHPGurukul Employee Record Management System 1.3. Affected is an unknown function of the file changepassword.php. The manipulation of the argument currentpassword leads to sql injection. It is possible to launch the attack remotely...
CVE-2025-3822
A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file changepassword.php. The manipulation of the argument txtconfirmpassword/txtnewpassword/txtoldpassword leads to cro...
CVE-2025-3822 SourceCodester Web-based Pharmacy Product Management System changepassword.php cross site scripting
A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file changepassword.php. The manipulation of the argument txtconfirmpassword/txtnewpassword/txtoldpassword leads to cro...
CVE-2025-3822 SourceCodester Web-based Pharmacy Product Management System changepassword.php cross site scripting
A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file changepassword.php. The manipulation of the argument txtconfirmpassword/txtnewpassword/txtoldpassword leads to cro...
PT-2025-17404 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A problem was found in the processing of the file changepassword.php. The manipulation of the arguments txtconfirm password, txtnew password, and txtold...
CVE-2025-3822: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file changepassword.php. The manipulation of the argument txtconfirmpassword/txtnewpassword/txtoldpassword leads to cro...
CVE-2024-4645 SourceCodester Prison Management System changepassword.php cross site scripting
A vulnerability was found in SourceCodester Prison Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /Admin/changepassword.php. The manipulation of the argument txtoldpassword/txtnewpassword/txtconfirmpassword leads to cross site scripting...
CVE-2024-4644
A vulnerability has been found in SourceCodester Prison Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /Employee/changepassword.php. The manipulation of the argument txtoldpassword/txtnewpassword/txtconfirmpassword leads to cross site...
CVE-2024-4644 SourceCodester Prison Management System changepassword.php cross site scripting
A vulnerability has been found in SourceCodester Prison Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /Employee/changepassword.php. The manipulation of the argument txtoldpassword/txtnewpassword/txtconfirmpassword leads to cross site...
CVE-2024-4644 SourceCodester Prison Management System changepassword.php cross site scripting
A vulnerability has been found in SourceCodester Prison Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /Employee/changepassword.php. The manipulation of the argument txtoldpassword/txtnewpassword/txtconfirmpassword leads to cross site...
PT-2024-31988
Name of the Vulnerable Software and Affected Versions SourceCodester Prison Management System version 1.0 Description A cross-site scripting vulnerability has been found in the /Employee/changepassword.php file. The manipulation of the txtold password, txtnew password, and txtconfirm password...
CVE-2024-4644: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in SourceCodester Prison Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /Employee/changepassword.php. The manipulation of the argument txtoldpassword/txtnewpassword/txtconfirmpassword leads to cross site...
CVE-2024-4645: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Prison Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /Admin/changepassword.php. The manipulation of the argument txtoldpassword/txtnewpassword/txtconfirmpassword leads to cross site scripting...
PT-2024-31992
Name of the Vulnerable Software and Affected Versions SourceCodester Prison Management System version 1.0 Description A vulnerability was found in the system, affecting the processing of the file /Admin/changepassword.php. The manipulation of the arguments txtold password, txtnew password, and...
PT-2023-5427
Name of the Vulnerable Software and Affected Versions Cacti version 1.2.24 Description The issue is related to the use of open redirection in the auth changepassword.php component of the Cacti network monitoring software. This can allow a remote attacker to redirect a user to an arbitrary URL. Th...
CVE-2023-0641 PHPGurukul Employee Leaves Management System changepassword.php weak password
A vulnerability was found in PHPGurukul Employee Leaves Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file changepassword.php. The manipulation of the argument newpassword/confirmpassword leads to weak password...
CVE-2023-0641
PHPGurukul's Employee Leaves Management System 1.0 contains a vulnerability in changepassword.php where manipulating newpassword/confirmpassword weakens password requirements. The issue is remotely exploitable with high impact on confidentiality/integrity (per CVSS). Connected documents corrobora...
CVE-2023-0641: Weak Password Requirements
A vulnerability was found in PHPGurukul Employee Leaves Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file changepassword.php. The manipulation of the argument newpassword/confirmpassword leads to weak password...
Lead Management System SQL Injection Vulnerability (CNVD-2023-05740)
Lead management system is a lead management system developed by Mayuri K. The Lead Management System v1.0 version is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the userid parameter of changePassword.php. An attacker could use this...
