CVE-2023-41652

CVE-2023-41652 RSVPMarker = 10.6.6 - SQL Injection non autenticata Descrizione: Il plugin RSVPMarker per WordPress è vulnerabile a SQL Injection tramite il parametro 'email' nelle versioni fino alla 10.6.6 inclusa, a causa di un escaping insufficiente sul parametro fornito dall'utente e della...

cve-2023-22515-exp

cve-2023-22515-exp Script di exploit in Python per cve-2023-22515 Parametri: root@kitploit: -h, --help show this help message and exit -H HOST, --host HOST Specifica l'URL -U USERNAME, --username USERNAME Specifica il nome utente -PW PASSWORD, --password PASSWORD Specifica la password -E EMAIL,...

CVE-2026-42758

CVE-2026-42758 CVE-2026-42758 WebinarIgnition Exploit Esempi di utilizzo Utilizzo base python3 exploit.py https://target.example.com -e [email protected] Specificare la pagina del webinar python3 exploit.py https://target.example.com -e [email protected] -w...

CVE-2025-51411

🛡️ CVE-Offenlegung: CVE-2025-51411 — Reflektiertes XSS in Institute-of-Current-Students Offenlegungsdatum: 25. Juli 2025 CVE-ID: CVE-2025-51411 Schweregrad: MEDIUM CVSS 6.1 🧩 Zusammenfassung Eine reflektierte Cross-Site-Scripting XSS Schwachstelle existiert im Projekt Institute-of-Current-Students...

CVE-2024-34327

CVE-2024-34327 Strumento di Verifica per Vulnerabilità SQL Injection Questo script V-24-02-001SQLiCheck.py è uno strumento proof-of-concept PoC per verificare la presenza di una vulnerabilità di SQL injection blind basata sul tempo che interessa l'endpoint password-reset-token.php, identificata...

CVE-2025-50866

CloudClassroom-PHP-Project 1.0 contiene una vulnerabilità di Cross-site Scripting XSS riflesso nel parametro email dell'endpoint postquerypublic. Una sanificazione impropria permette a un attaccante di iniettare codice JavaScript arbitrario che viene eseguito nel contesto del browser dell'utente,...

CVE-2022-40348_Intern-Record-System-Cross-site-Scripting-V1.0-Vulnerability-Unauthenticated

CVE-2022-40348: Intern Record System - Cross-site Scripting XSS non autenticato nei parametri 'name' e 'email' Titolo Exploit: Intern Record System - Cross-site Scripting XSS non autenticato nei parametri 'name' e 'email' Data: 2022-06-09 Autore Exploit: Hamdi Sevben Homepage del fornitore:...

CVE-2024-30998

PHPGurukul Men Salon Management System 2.0 Benvenuto nel repository di PHPGurukul Men Salon Management System 2.0. Questo progetto mira a fornire un sistema robusto per la gestione di un salone per uomini. Vulnerabilità di sicurezza CVE-2024-30998 Descrizione: Vulnerabile a SQL Injection tramite ...

CVE-2023-49546

CVE-2023-49546 Customer Support System 1.0 - Vulnerabilità di SQL Injection nel parametro "email" durante l'operazione "savestaff" Descrizione : Una vulnerabilità di SQL Injection esiste nella versione 1 del Customer Support System. Un attaccante malintenzionato può inviare comandi SQL al databas...

JS Help Desk <= 2.8.1 - SQL Injection

The JS Help Desk – Best Help Desk & Support Plugin plugin for WordPress is vulnerable to SQL Injection via the 'email' and 'trackingid' parameters in all versions up to 2.8.2 exclusive due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S...

OpenCATS 0.9.6 - Cross-Site Scripting

OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the email parameter in the Check Email function. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

CVE-2022-30983

A cross-site scripting XSS vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows remote attackers to inject arbitrary web script or HTML via the Enter email parameter...

EUVD-2022-56022

A cross-site scripting XSS vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows remote attackers to inject arbitrary web script or HTML via the Enter email parameter...

CVE-2022-30983

CVE-2022-30983 is a cross-site scripting (XSS) vulnerability in the Support chatbot component of Nopaperforms Niaa-Chatbot , affecting versions through 2022-05-17 . Remote attackers can inject arbitrary web script or HTML via the Enter email parameter. No patch version, workaround, or exploitatio...

CVE-2026-77020

A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file password-recovery.php. The manipulation of the argument email leads to sql injection. Remote exploitation of the attack is possible. The...

PT-2026-79068

A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file password-recovery.php. The manipulation of the argument email leads to sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-76574

A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the component User Login Handler. This manipulation of the argument email causes sql injection. The attack is possible to be...

CVE-2026-76574 code-projects Hospital Information System User Login UsersController.php login sql injection

A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the component User Login Handler. This manipulation of the argument email causes sql injection. The attack is possible to be...

CVE-2026-75778 code-projects Task Management System Login Form index.php select_with_multiple_condition sql injection

A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::selectwithmultiplecondition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack...

CVE-2026-75089

A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/checkavailability.php. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has...