CVE-2023-7173

CVE-2023-7173: 病院管理システムにおける格納型クロスサイトスクリプティング（XSS） 脆弱性の詳細 CVE ID: CVE-2023-7173 脆弱性の種類: 格納型XSS 影響を受けるコンポーネント: ユーザーログインページ 脆弱なパラメータ: Fullname ベンダー情報: phpgurukul.com 影響を受けるバージョン: Hospital Management System 1.0 脆弱性の説明...

CVE-2021-46362

CVE-2021-46362: Magnolia CMS에서의 FreeMarker 서버 측 템플릿 주입 Magnolia v6.2.3 이하의 등록 및 비밀번호 찾기 폼에서 발견된 서버 측 템플릿 주입SSTI 취약점으로, 인증되지 않은 공격자가 fullname 매개변수에 조작된 페이로드를 입력하여 임의 코드를 실행할 수 있습니다. 공동 작업: 이 취약점은 Marian-Razvan Ilisanu와의 협력을 통해 발견되었습니다. 공급업체 공개: 이 취약점에 대한 공급업체의 공개 및 수정 사항은 여기에서 확인할 수 있습니다. 개념 증명: 자...

CVE-2022-4556

CVE-2022-4556 - SOGo Webmail의 저장형 XSS v5.7.1 🧠 요약 SOGo 웹 인터페이스 의 신원 기본 설정Identity Preferences 섹션에 있는 fullName 필드에서 저장형 크로스 사이트 스크립팅XSS 취약점이 발견되었으며, 버전 5.7.1 에 영향을 미칩니다. 인증된 공격자는 악성 스크립트를 주입할 수 있으며, 해당 스크립트는 공격자를 포함한 모든 사용자가 메일 탭에 접근할 때마다 실행됩니다. 🆔 CVE 세부 정보 CVE ID : CVE-2022-4556 CVSS v3.1 : 6.1 중...

CVE-2022-3949

CVE-2022-3949 Simple Cashiering System의 XSS Simple Cashiering System은 크로스 사이트 스크립팅XSS에 취약합니다. 악의적인 행위자는 손상된 사용자의 fullname을 XSS 페이로드로 변경할 수 있으며, 관리자가 사용자 탭 또는 판매 탭을 방문하여악의적인 행위자가 수행한 판매를 살펴볼 때 페이로드가 트리거됩니다. 쿠키에 HttpOnly 플래그가 없으므로 세션 탈취로 이어질 수 있습니다. 재현 방법:...

-CVE-2021-41962

-CVE-2021-41962 설명 Sourcecodester Vehicle Service Management System 1.0에서 vehicleservice의 Send Service Request 내 Owner fullname 매개변수를 통해 발생하는 교차 사이트 스크립팅XSS 취약점이 존재합니다. 추가 정보 해당 없음 취약점 유형 교차 사이트 스크립팅 XSS 제품 공급업체 https://www.sourcecodester.com/ 영향받는 제품 코드 베이스 Vehicle Service Management System - 1....

CVE-2026-90845

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

CVE-2026-90845

CVE-2026-90845 is a cross-site scripting (XSS) flaw in PHPGurukul Daily Expense Tracker System 1.1 , specifically in the file /dets/includes/sidebar.php . Manipulating the FullName argument allows a remote attacker with low privileges to execute script in a victim's browser, requiring user intera...

CVE-2026-90845 PHPGurukul Daily Expense Tracker System sidebar.php cross site scripting

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

EUVD-2026-78231

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

CVE-2026-90845 PHPGurukul Daily Expense Tracker System sidebar.php cross site scripting

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

CVE-2026-90845: Improper Neutralization of Input During Web Page Generation

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

PT-2026-91770

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

CVE-2026-19207

A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploi...

CVE-2026-19207

Summary: PHPGurukul Company Visitor Management System 1.0 is affected by an input handling flaw in /manage-newvisitors.php where manipulating the fullname parameter enables cross-site scripting. The vulnerability can be triggered remotely and the exploit has been publicly disclosed. The documents...

CVE-2026-19207 PHPGurukul Company Visitor Management System manage-newvisitors.php cross site scripting

A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploi...

CVE-2026-19207

A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploi...

CVE-2026-19207 PHPGurukul Company Visitor Management System manage-newvisitors.php cross site scripting

A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploi...

EUVD-2026-54496

A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploi...

PT-2026-69049

Name of the Vulnerable Software and Affected Versions PHPGurukul Company Visitor Management System version 1.0 Description Remote cross site scripting occurs due to improper processing of the /manage-newvisitors.php endpoint. An attacker can trigger this by manipulating the fullname variable...

CVE-2026-19207: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploi...