EUVD-2020-16718

Malware in sbrugna...

EUVD-2020-16716

Malware in sbrugna...

CVE-2020-23980

DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page...

CVE-2020-23982

DesignMasterEvents Conference management 1.0.0 has cross site scripting via the 'certificate.php'...

CVE-2020-23982

DesignMasterEvents Conference management 1.0.0 has cross site scripting via the 'certificate.php'...

Cross site scripting

DesignMasterEvents Conference management 1.0.0 has cross site scripting via the 'certificate.php'...

CVE-2020-23982

DesignMasterEvents Conference management 1.0.0 has cross site scripting via the 'certificate.php'...

CVE-2020-23982

CVE-2020-23982 affects DesignMasterEvents Conference management 1.0.0, with a cross-site scripting vulnerability in the certificate.php endpoint. The available connected documents identify the issue as a stored/reflected or input-processing XSS via this PHP file, but do not provide specifics on e...

CVE-2020-23980

DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page...

CVE-2020-23980

DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page...

Sql injection

DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page...

CVE-2020-23980

CVE-2020-23980 affects DesignMasterEvents Conference Management 1.0.0 and allows SQL Injection via the administrator login page username field. CVSS3.1 base score 9.8 (CRITICAL); attack vector: NETWORK, no user interaction, no privileges required, confidentiality/integrity/availability impact: HI...

CVE-2020-23980

DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page...

CVE-2020-23982: Improper Neutralization of Input During Web Page Generation

DesignMasterEvents Conference management 1.0.0 has cross site scripting via the 'certificate.php'...

CVE-2020-23980: Improper Neutralization of Special Elements used in an SQL Command

DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page...

PT-2020-15614

Name of the Vulnerable Software and Affected Versions DesignMasterEvents Conference management version 1.0.0 Description The issue concerns a cross-site scripting problem. It is related to the 'certificate.php' file, which suggests that the vulnerability can be exploited through this specific...

PT-2020-15612

Name of the Vulnerable Software and Affected Versions DesignMasterEvents Conference management version 1.0.0 Description The issue allows SQL Injection via the username field on the administrator login page. Recommendations For DesignMasterEvents Conference management version 1.0.0, avoid using t...