CVE-2023-48823

A Blind SQL injection issue in ajax.php in GaatiTrack Courier Management System 1.0 allows an unauthenticated attacker to inject a payload via the email parameter during login...

CVE-2023-6416 SQL injection in Voovi Social Networking Script

A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via signup2.php in the emailadd parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve...

Teacher Subject Allocation Management System profile.php file cross-site scripting vulnerability

Teacher Subject Allocation Management System a teacher subject allocation management system. Teacher Subject Allocation Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the adminname and email...

CVE-2023-46026

Cross Site Scripting XSS vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters...

CVE-2023-46026

Cross Site Scripting XSS vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters...

CVE-2023-46581

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name, uname and email parameters in the registration.php component...

phpgurukul Teacher Subject Allocation Management System 安全漏洞

Teacher Subject Allocation Management System a teacher subject allocation management system. Teacher Subject Allocation Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the adminname and email...

PT-2023-30099 · Unknown · Inventory Management

Name of the Vulnerable Software and Affected Versions: Inventory Management version 1.0 Description: The issue allows a local attacker to execute arbitrary code via the name, uname, and email parameters in the "registration.php" component. This is a SQL injection vulnerability. Recommendations: F...

PT-2023-30221 · Unknown · Online Matrimonial Project

Name of the Vulnerable Software and Affected Versions: Online Matrimonial Project version 1.0 Description: The issue concerns Unauthenticated SQL Injection vulnerabilities. Specifically, the email parameter in the register function of the functions.php file is vulnerable. Recommendations: For...

Online Examination System feed.php Page SQL Injection Vulnerability

Online Examination System is an online examination system. Online Examination System v1.0 suffers from a SQL injection vulnerability, which stems from the lack of effective filtering and escaping of user-supplied data in the email parameter of the feed.php page, which can be exploited by an...

The vulnerability of the Check Email function in the OpenCATS workforce management system allows a hacker to perform cross-site scripting attacks.

The vulnerability of the Check Email function in the OpenCATS workforce management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the email parameter...

Sql injection

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'useremail' parameter of the businfo.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-45111

Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database...

Online Bus Booking System SQL Injection Vulnerability

Online Bus Booking System is an online bus booking system. A SQL injection vulnerability exists in Online Bus Booking System v1.0, which is caused by insufficient filtering of the useremail parameter on the businfo.php page, resulting in a SQL injection vulnerability...

Online Examination System SQL注入漏洞

Online Examination System is an online examination system. Online Examination System v1.0 suffers from a SQL injection vulnerability, which stems from the lack of effective filtering and escaping of user-supplied data in the email parameter of the feed.php page, which can be exploited by an...

PT-2023-29501 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the email parameter of the "routers/add-users.php" resource does not validate the characters receive...

CVE-2023-5695

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file pagesresetpwd.php. The manipulation of the argument email with the input testing%40example.com'%26%25alert9860 leads to...

CodeAstro Internet Banking System Cross-Site Scripting Vulnerability

CodeAstro Internet Banking System is a PHP online banking system from CodeAstro. A security vulnerability exists in CodeAstro Internet Banking System version 1.0, which originates from a cross-site scripting XSS vulnerability in the parameter email in the file pagesresetpwd.php...

PT-2023-32266 · Unknown · Codeastro Internet Banking System

Name of the Vulnerable Software and Affected Versions: CodeAstro Internet Banking System version 1.0 Description: A critical issue affects the processing of the file pages reset pwd.php, where the manipulation of the email argument leads to sql injection. The attack can be initiated remotely...

CodeAstro Internet Banking System SQL Injection Vulnerability

CodeAstro Internet Banking System is a PHP online banking system from CodeAstro. A security vulnerability exists in CodeAstro Internet Banking System version 1.0, which originates from a SQL injection vulnerability in the parameter email of the file pagesresetpwd.php...