26 matches found
PHPGurukul Student Record System SQL注入漏洞
PHPGurukul Student Record System is an application that is vulnerable to SQL injection. The vulnerability stems from a lack of validation of external input SQL statements in the cid parameter of edit-course.php, which can be exploited by remote attackers to through to execute arbitrary SQL...
Sql injection
SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the cid parameter to edit-course.php...
CVE-2021-26762: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the cid parameter to edit-course.php...
golflounge.com XSS vulnerability
Open Bug Bounty ID: OBB-385751 Description| Value ---|--- Affected Website:| golflounge.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
PT-2017-7896
Name of the Vulnerable Software and Affected Versions ATutor versions prior to 2.2.2 Description A Directory Traversal issue exists, allowing an attacker to read arbitrary files. This can be achieved by exploiting the icon parameter in the /mods/ core/courses/users/create course.php endpoint, and...