CVE-2023-49971

CVE-2023-49971 Customer Support System 1.0 - Cross-Site Scripting XSS Vulnerability in "firstname" field/parameter on "customerlist" Page Description : Customer Support System 1.0 is vulnerable to stored XSS. A XSS vulnerability exists in version 1 of the Customer Support System. A malicious acto...

CVE-2025-7840

XSS Exploit for CVE-2025-7840 Author : Byte Reaper @ByteReaper0 Description Proof‑of‑concept exploit for CVE-2025-7840 , targeting a vulnerable web application endpoint that fails to sanitize user input on the Firstname parameter of a reservation form. By crafting a GET request to:...

CVE-2026-124571

A flaw has been found in SourceCodester Simple CRUD using PHP and FPDF 1.0. Affected by this vulnerability is an unknown functionality of the file app/register.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack can be executed remotely. The exploit has...

EUVD-2026-119816

A flaw has been found in SourceCodester Simple CRUD using PHP and FPDF 1.0. Affected by this vulnerability is an unknown functionality of the file app/register.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack can be executed remotely. The exploit has...

CVE-2026-124571 SourceCodester Simple CRUD using PHP and FPDF register.php sql injection

A flaw has been found in SourceCodester Simple CRUD using PHP and FPDF 1.0. Affected by this vulnerability is an unknown functionality of the file app/register.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack can be executed remotely. The exploit has...

CVE-2026-124571

A SQL injection vulnerability exists in the SourceCodester Simple CRUD application (using PHP and FPDF 1.0). The flaw is located within an unknown functionality of the app/register.php file. An attacker can execute a remote attack by manipulating the firstname argument to perform unauthorized dat...

Projectworlds Advanced Library Management System input validation error vulnerability

Version 1.0 of the Projectworlds Advanced Library Management System contains a security vulnerability. This vulnerability stems from improper handling of the firstname/middlename/lastname/address/branch/type parameters in the file editmember.php, potentially leading to SQL injection...

CVE-2026-55872

GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1, GYM One's admin/users/index.php renders the stored firstname, lastname, and email profile fields into the administrator user list without HTML output encoding. An attacker who...

CVE-2026-55872 GYM One admin user list is vulnerable to stored cross-site scripting

GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1, GYM One's admin/users/index.php renders the stored firstname, lastname, and email profile fields into the administrator user list without HTML output encoding. An attacker who...

CVE-2026-55872 GYM One admin user list is vulnerable to stored cross-site scripting

GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1, GYM One's admin/users/index.php renders the stored firstname, lastname, and email profile fields into the administrator user list without HTML output encoding. An attacker who...

CVE-2026-55872

The open-source gym management software GYM One is vulnerable to stored cross-site scripting (XSS) in versions prior to 1.4.1 . The root cause is the lack of HTML output encoding when the admin/users/index.php page renders the firstname , lastname , and email profile fields into the administrator...

CVE-2026-55872 GYM One admin user list is vulnerable to stored cross-site scripting

GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1, GYM One's admin/users/index.php renders the stored firstname, lastname, and email profile fields into the administrator user list without HTML output encoding. An attacker who...

CVE-2026-55872

GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1, GYM One's admin/users/index.php renders the stored firstname, lastname, and email profile fields into the administrator user list without HTML output encoding. An attacker who...

CVE-2026-55872: Improper Neutralization of Input During Web Page Generation

GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1, GYM One's admin/users/index.php renders the stored firstname, lastname, and email profile fields into the administrator user list without HTML output encoding. An attacker who...

Mayer Balint GYM One Cross-site Scripting Vulnerability

Mayer Balint GYM versions prior to 1.4.1 have a cross-site scripting vulnerability. This vulnerability arises from the fact that the admin/users/index.php file does not encode the stored firstname, lastname, and email fields using HTML. This may lead to a stored-cross-site scripting attack...

Advanced-Library-Management-System-Project-in-PHP-with-Barcode-edit_member.php

Advanced-Library-Management-System-Project-in-PHP-with-Barcode...

CVE-2026-105809

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...

CVE-2026-105809 SourceCodester Simple Student Information System Profile Field register.php cross site scripting

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...

CVE-2026-105809

A cross-site scripting (XSS) vulnerability exists in SourceCodester Simple Student Information System 1.0 . The flaw is located in the Profile Field Handler component, specifically within the register.php file. Attackers can initiate a remote attack by manipulating the firstname or lastname argum...

CVE-2026-105809 SourceCodester Simple Student Information System Profile Field register.php cross site scripting

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...