CVE-2020-23977

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

CVE-2020-23977

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

CVE-2020-23973

KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter...

Cross site scripting

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

CVE-2020-23977: Improper Neutralization of Input During Web Page Generation

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

CVE-2020-23973: Improper Neutralization of Special Elements used in an SQL Command

KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter...

PT-2020-6754

Name of the Vulnerable Software and Affected Versions KandNconcepts Club CMS versions 1.1 through 1.2 Description The issue concerns a cross-site scripting problem via the id parameter in the team.php, player.php, and club.php scripts. This occurs due to inadequate protection of the webpage...

PT-2020-15608

Name of the Vulnerable Software and Affected Versions KandNconcepts Club CMS versions 1.1 through 1.2 Description The issue concerns SQL Injection, which can be exploited via the id parameter in the 'team.php', 'player.php', and 'club.php' files. Recommendations For versions 1.1 and 1.2, avoid...