Lucene search
+L

445 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/03 12:00 a.m.•2 views

CVE-2025-45938: Improper Neutralization of Input During Web Page Generation

Akeles Out of Office Assistant for Jira 4.0.1 is vulberable to Cross Site Scripting XSS via the Jira fullName parameter...

5.4CVSS5.8AI score0.00229EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/21 12:00 a.m.•9 views

CVE-2025-6406: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /hms/forgot-password.php. The manipulation of the argument fullname leads to sql injection. The attack may be...

9.8CVSS5.5AI score0.00481EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/06/17 12:00 a.m.•15 views

Restaurant Table Booking System manage-subadmins.php file cross-site scripting vulnerability

Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter fullname in the file...

5.4CVSS6.3AI score0.00302EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/06/13 12:00 a.m.•11 views

Rail Pass Management System /admin/add-pass.php File Cross-Site Scripting Vulnerability

Rail Pass Management System is a rail pass management system. Rail Pass Management System suffers from a cross-site scripting vulnerability that originates from the manipulation of the parameter fullname in the file /admin/add-pass.php. No details of the vulnerability are available at this time...

5.4CVSS6.2AI score0.00305EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/06/11 12:00 a.m.•25 views

Online Fire Reporting System /reporting.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter fullname in the file /reporting.php. The vulnerability c...

9.8CVSS8.3AI score0.00484EPSS
SaveExploits1References1
OSV
OSV
•added 2025/06/10 5:25 p.m.•20 views

CVE-2025-5970

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php. The manipulation of the argument fullname leads to cross site scripting. The attack may be launched...

5.4CVSS3.7AI score0.00305EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/06/10 12:00 a.m.•12 views

PHPGurukul Rail Pass Management System 代码注入漏洞

Rail Pass Management System is a rail pass management system. Rail Pass Management System suffers from a cross-site scripting vulnerability that originates from the manipulation of the parameter fullname in the file /admin/add-pass.php. No details of the vulnerability are available at this time...

5.4CVSS6AI score0.00305EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/10 12:00 a.m.•7 views

CVE-2025-5970: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php. The manipulation of the argument fullname leads to cross site scripting. The attack may be launched...

5.4CVSS3.5AI score0.00305EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/10 12:00 a.m.•6 views

CVE-2025-5972: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /admin/manage-subadmins.php. The manipulation of the argument fullname leads to cross site scripting. It is possible to launch the attack remotel...

5.4CVSS4AI score0.00302EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/10 12:00 a.m.•1 views

CVE-2025-5976: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in PHPGurukul Rail Pass Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/add-pass.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The...

5.4CVSS3.8AI score0.00305EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/10 12:00 a.m.•16 views

PHPGurukul Restaurant Table Booking System 代码注入漏洞

Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter fullname in the file...

5.4CVSS6.2AI score0.00302EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/06/10 12:00 a.m.•15 views

PHPGurukul Restaurant Table Booking System 代码注入漏洞

PHPGurukul Restaurant Table Booking System is a restaurant table booking system from PHPGurukul. A code injection vulnerability exists in version 1.0 of the PHPGurukul Restaurant Table Booking System, which originates from a cross-site scripting attack due to the incorrect operation of the...

5.4CVSS4.3AI score0.00305EPSS
SaveExploits1References7
OSV
OSV
•added 2025/06/04 9:15 p.m.•18 views

CVE-2025-5612

A vulnerability has been found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This vulnerability affects unknown code of the file /reporting.php. The manipulation of the argument fullname leads to sql injection. The attack can be initiated remotely. The exploit has bee...

9.8CVSS5.8AI score0.00484EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/06/04 12:00 a.m.•23 views

PHPGurukul Online Fire Reporting System 注入漏洞

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter fullname in the file /reporting.php. The vulnerability c...

9.8CVSS7AI score0.00484EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/04 12:00 a.m.•4 views

CVE-2025-5612: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This vulnerability affects unknown code of the file /reporting.php. The manipulation of the argument fullname leads to sql injection. The attack can be initiated remotely. The exploit has bee...

9.8CVSS6.4AI score0.00484EPSS
SaveExploits1References1
OSV
OSV
•added 2025/06/01 9:15 p.m.•16 views

CVE-2025-5407

A vulnerability has been found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /registerscript.php. The manipulation of the argument fullname leads to cross site scriptin...

5.4CVSS3.6AI score0.00345EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/06/01 12:00 a.m.•26 views

PT-2025-23434 · Unknown · Chaitak-Gorai Blogbook

Name of the Vulnerable Software and Affected Versions: chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513 Description: A vulnerability has been found in chaitak-gorai Blogbook, classified as problematic. It affects an unknown functionality of the file /register script.php. The...

4.8CVSS3.2AI score0.00345EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/01 12:00 a.m.•5 views

CVE-2025-5407: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /registerscript.php. The manipulation of the argument fullname leads to cross site scriptin...

5.4CVSS3.4AI score0.00345EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/01 12:00 a.m.•26 views

Blogbook 代码注入漏洞

Blogbook is a content management system project by the individual developer Chaitak Gorai. A code injection vulnerability exists in Blogbook 92f5cf90f8a7e6566b576fe0952e14e1c6736513 and prior versions, which originates from a cross-site scripting attack on the parameter fullname in the file...

5.4CVSS4.3AI score0.00345EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/30 12:00 a.m.•2 views

CVE-2025-5361: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. This issue affects some unknown processing of the file /contact.php. The manipulation of the argument fullname leads to sql injection. The attack may be initiated remotely. The...

9.8CVSS7AI score0.00507EPSS
SaveExploits1References1
Rows per page
Query Builder