Information Disclosure

Liferay Portal is vulnerable to Information Disclosure. The vulnerability is due to an enumeration of user screen names, allowing remote authenticated users to obtain a user's full name from the page's title. This potentially leads to Information Disclosure...

CVE-2024-2065

A vulnerability was found in SourceCodester Barangay Population Monitoring System up to 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /endpoint/update-resident.php. The manipulation of the argument fullname leads to cross site scripting. The...

CVE-2024-1822

A vulnerability classified as problematic has been found in PHPGurukul Tourism Management System 1.0. Affected is an unknown function of the file user-bookings.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit...

Cross site scripting

A vulnerability classified as problematic has been found in PHPGurukul Tourism Management System 1.0. Affected is an unknown function of the file user-bookings.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit...

CVE-2024-1822 PHPGurukul Tourism Management System user-bookings.php cross site scripting

A vulnerability classified as problematic has been found in PHPGurukul Tourism Management System 1.0. Affected is an unknown function of the file user-bookings.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit...

Tourism Management System Cross-Site Scripting Vulnerability

Tourism Management System is an American website builder for tourism management. A cross-site scripting vulnerability exists in Tourism Management System version 1.0, which stems from the parameter Full Name in the file user-bookings.php that causes cross-site scripting...

CVE-2024-25150

Information disclosure vulnerability in the Control Panel in Liferay Portal 7.2.0 through 7.4.2, and older unsupported versions, and Liferay DXP 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions allows remote authenticated users to obtain a user's full name from the page...

CVE-2024-25208

Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the Add Resident function at /barangay-population-monitoring-system/masterlist.php. This vulnerabiity allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

Cross site scripting

Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the Add Resident function at /barangay-population-monitoring-system/masterlist.php. This vulnerabiity allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-25208

Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the Add Resident function at /barangay-population-monitoring-system/masterlist.php. This vulnerabiity allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-1267

A vulnerability, which was classified as problematic, has been found in CodeAstro Restaurant POS System 1.0. Affected by this issue is some unknown functionality of the file createaccount.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched...

Restaurant POS System Cross-Site Scripting Vulnerability

Restaurant POS System is a full-featured Restaurant POS System project based on the Restaurant POS System project by Martin Mbithi Nzilani Individual Developer. A cross-site scripting vulnerability exists in Restaurant POS System version 1.0, which stems from the parameter Full Name in the file...

PT-2024-17710 · Codeastro · Codeastro Restaurant Pos System

Name of the Vulnerable Software and Affected Versions: CodeAstro Restaurant POS System version 1.0 Description: A problematic issue has been found in the CodeAstro Restaurant POS System, affecting some unknown functionality of the file create account.php. The manipulation of the Full Name argumen...

CVE-2024-0773

A vulnerability classified as problematic was found in CodeAstro Internet Banking System 1.0. Affected by this vulnerability is an unknown functionality of the file pagesclientsignup.php. The manipulation of the argument Client Full Name leads to cross site scripting. The attack can be launched...

CodeAstro Internet Banking System Input Validation Error Vulnerability

CodeAstro Internet Banking System is a PHP online banking system from CodeAstro. An input validation error vulnerability exists in CodeAstro Internet Banking System version 1.0, which stems from the inclusion of an unknown section in pagesclientsignup.php, where the use of a specific input via th...

PT-2024-15814 · Unknown · Codeastro Internet Banking System

Name of the Vulnerable Software and Affected Versions: CodeAstro Internet Banking System version 1.0 Description: A problematic issue was found in the CodeAstro Internet Banking System, affecting an unknown part of the file pages client signup.php. The manipulation of the argument Client Full Nam...

CVE-2024-0773 CodeAstro Internet Banking System pages_client_signup.php cross site scripting

A vulnerability classified as problematic was found in CodeAstro Internet Banking System 1.0. Affected by this vulnerability is an unknown functionality of the file pagesclientsignup.php. The manipulation of the argument Client Full Name leads to cross site scripting. The attack can be launched...

CodeAstro Internet Banking System Cross-Site Scripting Vulnerability

CodeAstro Internet Banking System is a PHP online banking system from CodeAstro. A cross-site scripting vulnerability exists in CodeAstro Internet Banking System version 1.0, which stems from the parameter Client Full Name in the file pagesclientsignup.php that can lead to cross-site scripting...

PT-2024-15809 · Unknown · Codeastro Internet Banking System

Name of the Vulnerable Software and Affected Versions: CodeAstro Internet Banking System version 1.0 Description: A problematic vulnerability was found in the CodeAstro Internet Banking System, affecting an unknown functionality of the file pages client signup.php. The manipulation of the Client...

Vehicle Booking System Cross-Site Scripting Vulnerability

Vehicle Booking System is a vehicle booking system by Martin Mbithi Nzilani, an individual developer. A cross-site scripting vulnerability exists in Vehicle Booking System version 1.0, which originates in the usr/usr-register.php in the component User Registration, which contains unknown code tha...