CVE-2022-3949

CVE-2022-3949 简单收银系统中的 XSS 漏洞 简单收银系统（Simple Cashiering System）容易受到跨站脚本攻击（XSS）的影响——恶意行为者可以将被入侵用户的 fullname 更改为 XSS Payload，每当管理员访问用户选项卡或销售选项卡（并查看恶意行为者所进行的销售）时，该 Payload 就会被触发。由于 cookie 没有设置 HttpOnly 标志，这可能导致会话接管。 复现方法： 下载...

-CVE-2021-41962

-CVE-2021-41962 Descripción Existe una vulnerabilidad de Cross Site Scripting XSS en Sourcecodester Vehicle Service Management System 1.0 a través del parámetro Owner fullname en un Send Service Request en vehicleservice. Información adicional N/A Tipo de vulnerabilidad Cross Site Scripting XSS...

CVE-2023-7173

CVE-2023-7173：医院管理系统中的存储型跨站脚本（XSS）漏洞 漏洞详情 CVE ID： CVE-2023-7173 漏洞类型： 存储型 XSS 受影响组件： 用户登录页面 易受攻击的参数： Fullname 供应商详情： phpgurukul.com 受影响版本： 医院管理系统 1.0 漏洞描述 存储型跨站脚本（XSS）是一种严重的 Web 漏洞，允许将恶意代码注入网站，存储在数据库中，并在其他用户查看受感染页面时执行。在本案例中，该漏洞存在于医院管理系统（HMS）的用户登录页面中，其中“Fullname”参数容易受到存储型 XSS...

CVE-2021-46362

CVE-2021-46362: Inyección de plantillas del lado del servidor FreeMarker en Magnolia CMS Una vulnerabilidad de inyección de plantillas del lado del servidor SSTI en los formularios de Registro y Contraseña Olvidada de Magnolia v6.2.3 y versiones anteriores permite a atacantes no autenticados...

CVE-2022-4556

CVE-2022-4556 - SOGo Webmail における保存型XSS v5.7.1 🧠 概要 SOGo Web インターフェースの Identity Preferences セクションにある fullName フィールドにて、バージョン 5.7.1 に影響を与える 保存型クロスサイトスクリプティング XSS の脆弱性が発見されました。認証された攻撃者は悪意のあるスクリプトを注入し、そのスクリプトは 攻撃者を含む すべてのユーザーがメールタブにアクセスするたびに実行されます。 🆔 CVE 詳細 CVE ID : CVE-2022-4556 CVSS v3.1 : 6.1 Medi...

CVE-2026-90845

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

CVE-2026-90845

CVE-2026-90845 is a cross-site scripting (XSS) flaw in PHPGurukul Daily Expense Tracker System 1.1 , specifically in the file /dets/includes/sidebar.php . Manipulating the FullName argument allows a remote attacker with low privileges to execute script in a victim's browser, requiring user intera...

EUVD-2026-78231

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

CVE-2026-90845 PHPGurukul Daily Expense Tracker System sidebar.php cross site scripting

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

CVE-2026-90845 PHPGurukul Daily Expense Tracker System sidebar.php cross site scripting

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

CVE-2026-90845: Improper Neutralization of Input During Web Page Generation

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

PT-2026-91770

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

CVE-2026-19207

A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploi...

CVE-2026-19207

Summary: PHPGurukul Company Visitor Management System 1.0 is affected by an input handling flaw in /manage-newvisitors.php where manipulating the fullname parameter enables cross-site scripting. The vulnerability can be triggered remotely and the exploit has been publicly disclosed. The documents...

CVE-2026-19207

A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploi...

CVE-2026-19207 PHPGurukul Company Visitor Management System manage-newvisitors.php cross site scripting

A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploi...

EUVD-2026-54496

A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploi...

CVE-2026-19207 PHPGurukul Company Visitor Management System manage-newvisitors.php cross site scripting

A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploi...

CVE-2026-19207: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploi...

CVE-2026-59102

Forgejo before 15.0.3 contains a stored cross-site scripting vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by setting a full name containing an HTML payload and triggering an Actions run. When the DEFAULTSHOWFULLNAME option is enabled,...