1681 matches found
CVE-2020-21993
In WEMS Limited Enterprise Manager 2.58, input passed to the GET parameter 'email' is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML code in a user's browser session in context of an affected site...
Design/Logic Flaw
In WEMS Limited Enterprise Manager 2.58, input passed to the GET parameter 'email' is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML code in a user's browser session in context of an affected site...
packetstormsecurity WEMS Enterprise Manager 跨站脚本漏洞
packetstormsecurity WEMS Enterprise Manager is a packetstormsecurity open source application. A centralized management and monitoring system for many WEMS-equipped sites. A cross-site scripting vulnerability exists in packetstormsecurity WEMS Enterprise Manager 2.58, which arises from input passe...
CVE-2021-27319
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter...
CVE-2021-27319
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter...
CVE-2021-27319
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter...
CVE-2021-27319
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter...
CVE-2021-27319: Improper Neutralization of Special Elements used in an SQL Command
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter...
Sourcecodesterk Doctor Appointment System SQL注入漏洞
Sourcecodesterk Doctor Appointment System is a Sourcecodesterk open source application. It provides an appointment scheduling feature. Doctor Appointment System version 1.0 suffers from an SQL injection vulnerability that originates from a remote blind SQL injection vulnerability in the name and...
Doctor Appointment System 1.0 Blind SQL Injection Vulnerability
Exploit Title: Doctor Appointment System 1.0 Blind SQL injection in email parameter CVE: CVE-2021-27319 Exploit Author: Nakul Ratti Vendor Homepage: https://www.sourcecodester.com/php/14182/doctor-appointment-system.html Software Link:...
Sourcecodesterk Doctor Appointment System SQL注入漏洞
Sourcecodesterk Doctor Appointment System is a Sourcecodesterk open source application. Provides an appointment function . Doctor Appointment System version 1.0 suffers from an SQL injection vulnerability that originates from a remote blind SQL injection vulnerability in the name and email...
Online Internship Management System 1.0 - (email) SQL injection Auth Bypass Vulnerability
Exploit Title: Online Internship Management System 1.0 - 'email' SQL injection Auth Bypass Exploit Author: Christian Vierschilling Vendor Homepage: https://www.sourcecodester.com Software Link:...
CVE-2021-3188
phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports...
CVE-2021-3188
phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports...
CVE-2021-3188
phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports...
Design/Logic Flaw
phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports...
PhpList 注入漏洞
phpList is an open source newsletter and email marketing software from phpList UK. A CSV injection vulnerability exists in phpList 3.6.0 related to the email parameter and /lists/admin/ export. No detailed vulnerability details are provided at this time...
phpList CSV Injection Vulnerability
phpList is an open source newsletter and email marketing software from phpList UK. A CSV injection vulnerability exists in phpList 3.6.0 related to the email parameter and /lists/admin/ export. No detailed vulnerability details are provided at this time...
CVE-2021-3188
CVE-2021-3188 affects phpList 3.6.0. The vulnerability is a CSV injection issue tied to the email parameter and exports under /lists/admin/, with the CVE described as enabling CSV injection. The available data confirms the affected software and the general class of vulnerability (CSV injection) b...