17 matches found
CVE-2022-4556
CVE-2022-4556 - SOGo Webmail의 저장형 XSS v5.7.1 🧠 요약 SOGo 웹 인터페이스 의 신원 기본 설정Identity Preferences 섹션에 있는 fullName 필드에서 저장형 크로스 사이트 스크립팅XSS 취약점이 발견되었으며, 버전 5.7.1 에 영향을 미칩니다. 인증된 공격자는 악성 스크립트를 주입할 수 있으며, 해당 스크립트는 공격자를 포함한 모든 사용자가 메일 탭에 접근할 때마다 실행됩니다. 🆔 CVE 세부 정보 CVE ID : CVE-2022-4556 CVSS v3.1 : 6.1 중...
CVE-2022-3949
CVE-2022-3949 Simple Cashiering System의 XSS Simple Cashiering System은 크로스 사이트 스크립팅XSS에 취약합니다. 악의적인 행위자는 손상된 사용자의 fullname을 XSS 페이로드로 변경할 수 있으며, 관리자가 사용자 탭 또는 판매 탭을 방문하여악의적인 행위자가 수행한 판매를 살펴볼 때 페이로드가 트리거됩니다. 쿠키에 HttpOnly 플래그가 없으므로 세션 탈취로 이어질 수 있습니다. 재현 방법:...
EUVD-2021-34760
Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...
CVE-2021-47911
Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...
CVE-2026-1598 Bdtask Bhojon All-In-One Restaurant Management System User Information profile cross site scripting
A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It i...
CVE-2025-12255
A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /addcontestant.php. Performing manipulation of the argument fullname results in sql injection. Remote exploitation of the attack is possible. The exploit has been release...
CVE-2025-57147
A SQL Injection vulnerability was found in phpgurukul Complaint Management System 2.0. The vulnerability is due to lack of input validation of multiple parameters including fullname, email, and contactno in user/registration.php...
CVE-2025-9656 PHPGurukul Directory Management System add-directory.php cross site scripting
A security vulnerability has been detected in PHPGurukul Directory Management System 2.0. This vulnerability affects unknown code of the file /admin/add-directory.php. The manipulation of the argument fullname leads to cross site scripting. The attack may be initiated remotely. The exploit has be...
Exploit for Improper Neutralization in Alinto Sogo
CVE-2022-4556 - Stored XSS in SOGo Webmail v5.7.1 🧠 Summ...
CVE-2025-4785
A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /user-profile.php. The manipulation of the argument fullname/contactnumber leads to sql injection. The attack may be launched...
CVE-2025-45751
SourceCodester Web Based Pharmacy Product Management System 1.0 is vulnerable to Cross Site Scripting XSS in add-admin.php via the Fullname text field...
SourceCodester Web Based Pharmacy Product Management System 安全漏洞
SourceCodester Web Based Pharmacy Product Management System is an open source web-based pharmaceutical management system from SourceCodester. A security vulnerability exists in SourceCodester Web Based Pharmacy Product Management System version 1.0, which originates from an unvalidated Fullname...
CVE-2025-45751
SourceCodester Web Based Pharmacy Product Management System 1.0 is vulnerable to Cross Site Scripting XSS in add-admin.php via the Fullname text field...
CVE-2023-1354
A vulnerability has been found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file register.php. The manipulation of the argument...
Try My Recipe 跨站脚本漏洞
Try My Recipe is a recipe sharing site by the personal developer of Carlo Montero. It is used for any user who enjoys cooking to explore other people's recipes and post/share their own. Try My Recipe Recipe Sharing Website - CMS suffers from a cross-site scripting vulnerability that stems from a...