1569 matches found
Customer Support System Cross-Site Scripting Vulnerability (CNVD-2024-14026)
Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a cross-site scripting vulnerability that stems fro...
Code injection
An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to the email parameter...
CVE-2024-25501
CVE-2024-25501 concerns WinMail (versions 7.1, 5.1, and earlier). The vulnerability allows a remote attacker to execute arbitrary code by sending a crafted script to the email parameter. The impact is described as high confidentiality, integrity, and availability risks (per CVSS 3.1 metrics: AV:N...
CVE-2024-25501
An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to the email parameter...
CVE-2024-25501
An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to the email parameter...
Customer Support System SQL Injection Vulnerability (CNVD-2024-14032)
Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a SQL injection vulnerability that originates from ...
PHP MySQL User Signup Login System SQL Injection Vulnerability
The PHP MySQL User Signup Login System is a login and registration form using HTML, PHP and MySQL. A SQL injection vulnerability exists in version 1.0 of the PHP MySQL User Signup Login System, which originates from an SQL injection vulnerability in the email parameter of the /login.php file...
BIT-PHPLIST-2021-3188
phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports...
CVE-2023-49973
A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customersupport/index.php?page=customerlist...
CVE-2023-49973
A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customersupport/index.php?page=customerlist...
Cross site scripting
A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customersupport/index.php?page=customerlist...
Customer Support System 跨站脚本漏洞
Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a cross-site scripting vulnerability that stems fro...
CVE-2023-49973
A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customersupport/index.php?page=customerlist...
CVE-2024-27627
A reflected cross-site scripting XSS vulnerability exists in SuperCali version 1.1.0, allowing remote attackers to execute arbitrary JavaScript code via the email parameter in the badpassword.php page...
Cross site scripting
A reflected cross-site scripting XSS vulnerability exists in SuperCali version 1.1.0, allowing remote attackers to execute arbitrary JavaScript code via the email parameter in the badpassword.php page...
CVE-2023-49546
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customersupport/ajax.php...
CVE-2023-49546
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customersupport/ajax.php...
CVE-2023-49546
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customersupport/ajax.php...
Sql injection
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customersupport/ajax.php...
SuperCali Security Vulnerabilities
SuperCali is an event calendar script from SuperCali. A security vulnerability exists in SuperCali version 1.1.0. A remote attacker can exploit this vulnerability to execute arbitrary JavaScript code via the email parameter in the badpassword.php page...