445 matches found
CVE-2024-9084: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in code-projects Blood Bank System 1.0. This vulnerability affects unknown code of the file bbms.php. The manipulation of the argument fullname/age/bloodgroup/city/phno/gender as part of String leads to cross site scripting. The attack can be...
CVE-2024-45528
CodeAstro MembershipM-PHP aka Membership Management System in PHP 1.0 allows addmembers.php fullname stored XSS...
PT-2024-31683
Name of the Vulnerable Software and Affected Versions: CodeAstro MembershipM-PHP aka Membership Management System in PHP version 1.0 Description: The issue allows for stored XSS in the fullname parameter of the "add members.php" page. This can lead to malicious script execution when the stored da...
CVE-2024-45528: Improper Neutralization of Input During Web Page Generation
CodeAstro MembershipM-PHP aka Membership Management System in PHP 1.0 allows addmembers.php fullname stored XSS...
Azure CLI Credentials Gatherer
This module will collect the Azure CLI 2.0+ az cli settings files for all users on a given target. These configuration files contain JWT tokens used to authenticate users and other subscription information. Once tokens are stolen from one host, they can be used to impersonate the user from a...
PT-2024-37576 · Unknown · Tailoring Management System
Name of the Vulnerable Software and Affected Versions: Tailoring Management System version 1.0 Description: A critical issue was found in the Tailoring Management System, affecting the file customeradd.php. The manipulation of the fullname, address, phonenumber, sex, email, city, and comment...
CVE-2024-5395
A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file listofinstructor.php. The manipulation of the argument FullName leads to sql injection. The attack may be initiated remotely. The...
CVE-2024-5395
Affects itsourcecode Online Student Enrollment System 1.0. The vulnerability resides in processing the file listofinstructor.php, where manipulating the FullName parameter leads to SQL injection. The issue can be exploited remotely and has been disclosed publicly. Reported impact and exploitation...
CVE-2024-5395: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file listofinstructor.php. The manipulation of the argument FullName leads to sql injection. The attack may be initiated remotely. The...
Prison Management System 跨站脚本漏洞
Prison Management System is a prison management system developed by Carlo Montero. A cross-site scripting vulnerability exists in Prison Management System version 1.0, which originates in /Employee/edit-profile.php and contains unknown code that causes cross-site scripting through the use of the...
CVE-2024-2333
A vulnerability classified as critical has been found in CodeAstro Membership Management System 1.0. Affected is an unknown function of the file /addmembers.php. The manipulation of the argument fullname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
PT-2024-19811
Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description A critical issue has been found in the CodeAstro Membership Management System. The problem is related to an unknown function in the file /add members.php, where the manipulation of...
CVE-2024-2333: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in CodeAstro Membership Management System 1.0. Affected is an unknown function of the file /addmembers.php. The manipulation of the argument fullname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
Web-Based Student Clearance System SQL Injection Vulnerability
Web-Based Student Clearance System is a web-based student clearance system by the individual developer Ndueso Okorie. A SQL injection vulnerability exists in Web-Based Student Clearance System version 1.0, which stems from an incorrect manipulation of the parameter Fullname that can lead to sql...
CVE-2024-1928: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-admin.php of the component Edit User Profile Page. The manipulation of the argument Fullname lea...
PT-2024-16026 · Sourcecodester · Sourcecodester Employee Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Management System version 1.0 Description: A problematic vulnerability has been found in the system, affecting the edit-profile.php file. The issue arises from the manipulation of the fullname, phone, date of birth,...
CVE-2024-1010: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file edit-profile.php. The manipulation of the argument fullname/phone/date of birth/address/date of appointment leads to cross site scripting. It is...
CVE-2023-6442: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file add-phlebotomist.php. The manipulation of the argument empid/fullname leads to cross site scripting. The...
