Lucene search
+L

445 matches found

EUVD
EUVD
•added 2026/03/08 9:30 p.m.•22 views

EUVD-2026-10269

A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The...

5.1CVSS3.5AI score0.00223EPSS
SaveExploits1References6
NVD
NVD
•added 2026/03/08 8:15 p.m.•19 views

CVE-2026-3766

A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The...

5.4CVSS0.00223EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2026/03/08 8:15 p.m.•23 views

CVE-2026-3766

A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The...

5.4CVSS3.5AI score0.00223EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/03/08 8:02 p.m.•61 views

CVE-2026-3766 SourceCodester Web-based Pharmacy Product Management System edit-profile.php cross site scripting

A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The...

5.1CVSS0.00223EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/03/08 8:02 p.m.•42 views

CVE-2026-3766

A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The...

5.1CVSS3.5AI score0.00223EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/08 8:02 p.m.•8 views

CVE-2026-3766 SourceCodester Web-based Pharmacy Product Management System edit-profile.php cross site scripting

A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The...

5.1CVSS3.5AI score0.00223EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/03/08 12:00 a.m.•27 views

PT-2026-23977

A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The...

5.1CVSS3.5AI score0.00223EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2026/03/08 12:00 a.m.•37 views

SourceCodester Web-based Pharmacy Product Management System: Code Injection Vulnerability

SourceCodester Web-based Pharmacy Product Management System is an open-source web-based pharmacy product management system developed by SourceCodester. Version 1.0 of the SourceCodester Web-based Pharmacy Product Management System contains a code injection vulnerability. This vulnerability stems...

5.4CVSS5AI score0.00223EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/08 12:00 a.m.•12 views

CVE-2026-3766: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The...

5.4CVSS3.5AI score0.00223EPSS
SaveExploits1References1
NVD
NVD
•added 2026/02/01 1:15 p.m.•19 views

CVE-2021-47911

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS0.00204EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/02/01 12:15 p.m.•23 views

EUVD-2021-34760

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS5.9AI score0.00204EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/02/01 12:15 p.m.•11 views

CVE-2021-47911

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS5.9AI score0.00204EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/01 12:15 p.m.•9 views

CVE-2021-47911 Affiliate Pro 1.7 Reflected Cross-Site Scripting via Index Module

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS6AI score0.00204EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/02/01 12:15 p.m.•55 views

CVE-2021-47911 Affiliate Pro 1.7 Reflected Cross-Site Scripting via Index Module

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS0.00204EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/02/01 12:00 a.m.•22 views

PT-2026-5556

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS5.9AI score0.00204EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/01 12:00 a.m.•6 views

CVE-2021-47911: Improper Neutralization of Input During Web Page Generation

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests...

5.4CVSS6AI score0.00204EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/30 9:23 p.m.•17 views

CVE-2026-1598

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It i...

5.4CVSS3.5AI score0.00246EPSS
SaveExploits1References1
NVD
NVD
•added 2026/01/29 6:16 p.m.•24 views

CVE-2026-1598

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It i...

5.4CVSS0.00246EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2026/01/29 6:16 p.m.•19 views

CVE-2026-1598

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It i...

5.4CVSS3.5AI score0.00246EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/01/29 5:02 p.m.•9 views

CVE-2026-1598

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It i...

5.1CVSS3.5AI score0.00246EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder