CVE-2023-1690

The CVE-2023-1690 entry concerns SourceCodester Earnings and Expense Tracker App 1.0, where the vulnerability occurs in the login/registration path (LoginRegistration.php?a=register_user). The root cause is manipulation of the fullname parameter, resulting in cross-site scripting (XSS). The issue...

CVE-2023-1687

A vulnerability classified as problematic has been found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown function of the file LoginRegistration.php?a=registeruser. The manipulation of the argument Fullname leads to cross site scripting. It is possible to launch the...

CVE-2023-1687 SourceCodester Simple Task Allocation System cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown function of the file LoginRegistration.php?a=registeruser. The manipulation of the argument Fullname leads to cross site scripting. It is possible to launch the...

CVE-2023-1687: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown function of the file LoginRegistration.php?a=registeruser. The manipulation of the argument Fullname leads to cross site scripting. It is possible to launch the...

PT-2023-17170 · Sourcecodester · Sourcecodester Simple Task Allocation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Task Allocation System version 1.0 Description: A problematic issue has been discovered, allowing for cross-site scripting through the manipulation of the Fullname argument in the "LoginRegistration.php?a=register user"...

CVE-2023-1690: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester Earnings and Expense Tracker App 1.0. This issue affects some unknown processing of the file LoginRegistration.php?a=registeruser. The manipulation of the argument fullname leads to cross site scripting. The...

CVE-2023-1354

A vulnerability has been found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file register.php. The manipulation of the argument...

CVE-2023-1113

A vulnerability was found in SourceCodester Simple Payroll System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file admin/?page=admin of the component POST Parameter Handler. The manipulation of the argument fullname leads to cross si...

SourceCodester Simple Payroll System 跨站脚本漏洞

Simple Payroll System is a simple payroll system by Carlo Montero Personal Developer. A cross-site scripting vulnerability exists in SourceCodester Simple Payroll System version 1.0, which stems from the fact that incorrect manipulation of the parameter fullname can lead to cross-site scripting...

CVE-2023-1113: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Simple Payroll System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file admin/?page=admin of the component POST Parameter Handler. The manipulation of the argument fullname leads to cross si...

CVE-2023-1100

A vulnerability classified as critical has been found in SourceCodester Online Catering Reservation System 1.0. This affects an unknown part of the file /reservation/addmessage.php of the component POST Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is...

Online Catering Reservation System SQL注入漏洞

Online Catering Reservation System is an open source online catering reservation system. SourceCodester Online Catering Reservation System version 1.0 has a SQL injection vulnerability, the vulnerability stems from a problem in the file /reservation/addmessage.php, the operation of the parameter...

CVE-2023-1100: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Online Catering Reservation System 1.0. This affects an unknown part of the file /reservation/addmessage.php of the component POST Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is...

PT-2023-16754 · Sourcecodester · Sourcecodester Online Catering Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Catering Reservation System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Online Catering Reservation System. This issue affects the file /reservation/add message.php of the...

CVE-2023-23157

A stored cross-site scripting XSS vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullname parameter on the enquiry page...

CVE-2023-23157

A stored cross-site scripting XSS vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullname parameter on the enquiry page...

PT-2023-18864 · Unknown · Art Gallery Management System Project

Name of the Vulnerable Software and Affected Versions: Art Gallery Management System Project version 1.0 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullname parameter on the enquiry page...

CVE-2023-23157: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullname parameter on the enquiry page...

CVE-2023-1006: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been classified as problematic. This affects an unknown part of the component New Record Handler. The manipulation of the argument Firstname/Middlename/Lastname/Suffix/Nationality/Doctor Fullname/Doctor Suff...

SUSE CVE-2013-4885

The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences...