7 matches found
CVE-2026-13556: Improper Neutralization of Input During Web Page Generation
A vulnerability was determined in itsourcecode Online Hotel Management System 1.0. This affects an unknown part of the file /admin/modusers/controller.php?action=edit of the component POST Request Handler. This manipulation of the argument Name causes cross site scripting. The attack may be...
CVE-2023-1569 SourceCodester E-Commerce System cross site scripting
A vulnerability classified as problematic was found in SourceCodester E-Commerce System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/user/controller.php?action=edit. The manipulation of the argument UNAME with the input alert'1' leads to cross site scripting...
CVE-2022-35163: Improper Neutralization of Input During Web Page Generation
Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the UNAME parameter at /category/controller.php?action=edit...
PT-2019-9633
Name of the Vulnerable Software and Affected Versions Tubigan "Welcome to our Resort" version 1.0 Description The issue allows for CSRF, which can be exploited via the "admin/mod users/controller.php?action=edit" API endpoint. This could potentially allow attackers to perform unauthorized actions...
Cross site request forgery (csrf)
School Event Management System 1.0 allows CSRF via user/controller.php?action=edit...
PT-2018-14658
Name of the Vulnerable Software and Affected Versions School Event Management System version 1.0 Description The issue allows for CSRF via the "user/controller.php?action=edit" endpoint, potentially enabling unauthorized modifications. Recommendations For School Event Management System version 1....