Cross site scripting

A cross-site scripting XSS vulnerability in JFinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter under /front/person/profile.html...

PT-2023-18808 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter under "/front/person/profile.html". Recommendations: For...

CVE-2023-22975: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in JFinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter under /front/person/profile.html...

CVE-2023-22975

A cross-site scripting XSS vulnerability in JFinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter under /front/person/profile.html...

PT-2023-16324 · Sourcecodester · Sourcecodester Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A critical issue affects the file admin/forget password.php of the component Parameter Handler. The manipulation of the email argument leads to sql injection. Th...

PT-2023-16178 · Sourcecodester · Sourcecodester Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file admin/page-login.php. The manipulation of the email argument leads to...

Online Tours & Travels Management System SQL注入漏洞

Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. SourceCodester Online Tours & Travels Management System version 1.0 suffers from a SQL injection vulnerability that stems from a problem with some unknown functions in the file...

Online Food Ordering System SQL Injection Vulnerability (CNVD-2023-04530)

Online Food Ordering System is an online food ordering system. an SQL injection vulnerability exists in Online Food Ordering System, which stems from a problem in the unknown section of the file adminclass.php, where an operation on the parameter email can lead to sql injection. No details of the...

Online Food Ordering System SQL注入漏洞

Online Food Ordering System is an online food ordering system. an SQL injection vulnerability exists in Online Food Ordering System, which stems from a problem in the unknown section of the file adminclass.php, where an operation on the parameter email can lead to sql injection. No details of the...

PT-2023-16159 · Unknown · Sourcecodester Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System affected versions not specified Description: A critical vulnerability has been found in the SourceCodester Online Food Ordering System, affecting the Signup Module in the file admin class.php. The...

PT-2023-12632 · Sourcecodester · Sourcecodester Royale Event Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Royale Event Management System version 1.0 Description: A problematic issue has been found in the system, affecting an unknown function of the file /royal event/companyprofile.php. The manipulation of the companyname, regno,...

Fallstudie SQL注入漏洞

Fallstudie is an application by Marcel Boehm Personal Developer. DHBW Fallstudie suffers from a SQL injection vulnerability that stems from unknown functionality in the app/config/passport.js file for component logins, where manipulation of the parameters id/email can lead to SQL injection...

CVE-2022-4591

A vulnerability was found in mschaef toto up to 1.4.20. It has been declared as problematic. This vulnerability affects unknown code of the component Email Parameter Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.4.21 is able ...

CVE-2022-4591

CVE-2022-4591 affects mschaef toto up to version 1.4.20, where the Email Parameter Handler component allows cross-site scripting. The vulnerability can be triggered remotely and is described as problematic with the root cause tied to unknown code in the Email Parameter Handler; upgrading to 1.4.2...

CVE-2022-4591 mschaef toto Email Parameter cross site scripting

A vulnerability was found in mschaef toto up to 1.4.20. It has been declared as problematic. This vulnerability affects unknown code of the component Email Parameter Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.4.21 is able ...

PT-2022-27679 · Unknown · Mschaef Toto

Name of the Vulnerable Software and Affected Versions: mschaef toto versions up to 1.4.20 Description: A vulnerability was found in the Email Parameter Handler component, which can be exploited to lead to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.4.21 is...

CVE-2022-4591 mschaef toto Email Parameter cross site scripting

A vulnerability was found in mschaef toto up to 1.4.20. It has been declared as problematic. This vulnerability affects unknown code of the component Email Parameter Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.4.21 is able ...

CVE-2022-4591: Improper Neutralization

A vulnerability was found in mschaef toto up to 1.4.20. It has been declared as problematic. This vulnerability affects unknown code of the component Email Parameter Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.4.21 is able ...

CVE-2022-4591 mschaef toto Email Parameter cross site scripting

A vulnerability was found in mschaef toto up to 1.4.20. It has been declared as problematic. This vulnerability affects unknown code of the component Email Parameter Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.4.21 is able ...

Cross site scripting

A cross-site scripting XSS vulnerability in the component /signupscript.php of Ecommerce-Website v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the eMail parameter...