GZScripts 跨站脚本漏洞

GZScripts is a script from GZScripts, Inc. A cross-site scripting vulnerability exists in GZ Scripts PHP CRM Platform version 1.8, which stems from incorrect manipulation of the parameter action leading to cross-site scripting...

GZ Scripts Ticket Booking Script 跨站脚本漏洞

GZ Scripts Ticket Booking Script is a ticket booking system from GZ Scripts. A cross-site scripting vulnerability exists in GZ Scripts Ticket Booking Script version 1.8, which stems from cross-site scripting due to incorrect manipulation of the parameters firstname, secondname, phone, address1, a...

GZ Scripts Car Listing Script PHP 跨站脚本漏洞

GZ Scripts Car Listing Script PHP is a script from GZ Scripts, Inc. GZ Scripts Car Listing Script PHP suffers from a cross-site scripting vulnerability that stems from an unknown issue with /preview.php...

GZ Scripts GZ E Learning Platform 跨站脚本漏洞

GZ Scripts GZ E Learning Platform is a php e-learning platform from GZ Scripts. A cross-site scripting vulnerability exists in GZ Scripts GZ E Learning Platform that stems from an unknown issue...

GZ Scripts PHP Vacation Rental Script 跨站脚本漏洞

GZ Scripts PHP Vacation Rental Script is a powerful web-based vacation rental software from GZ Scripts. A cross-site scripting vulnerability exists in GZ Scripts PHP Vacation Rental Script, which stems from an unknown issue with /preview.php...

CVE-2023-3564 GZ Scripts GZ Multi Hotel Booking System index.php cross site scripting

A vulnerability was found in GZ Scripts GZ Multi Hotel Booking System 1.8. It has been classified as problematic. Affected is an unknown function of the file /index.php. The manipulation of the argument adults/children/calid leads to cross site scripting. It is possible to launch the attack...

CVE-2023-3563 GZ Scripts GZ E Learning Platform URL Parameter cross site scripting

A vulnerability was found in GZ Scripts GZ E Learning Platform 1.8 and classified as problematic. This issue affects some unknown processing of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-233357 was...

CVE-2023-3563

The CVE-2023-3563 entry concerns GZ Scripts’ GZ E Learning Platform 1.8. The vulnerability affects the URL Parameter Handler component, caused by insecure/unknown processing that enables cross-site scripting (XSS) and can be exploited remotely. The available sources do not specify a fixed version...

CVE-2023-3563 GZ Scripts GZ E Learning Platform URL Parameter cross site scripting

A vulnerability was found in GZ Scripts GZ E Learning Platform 1.8 and classified as problematic. This issue affects some unknown processing of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-233357 was...

CVE-2023-3562

GZ Scripts PHP CRM Platform 1.8 is affected by CVE-2023-3562. The vulnerability arises from improper handling of the action parameter in /index.php, enabling cross-site scripting. Reports consistently cite remote feasibility via a network vector, with the root cause described as manipulation of a...

CVE-2023-3561

The CVE-2023-3561 entry concerns GZ Scripts PHP GZ Hotel Booking Script 1.8. Affected component: /load.php. Root cause: lack of proper input handling for parameters first_name/second_name/phone/address_1/country leads to cross-site scripting. Impact: allows remote initiation of the attack; detail...

CVE-2023-3561 GZ Scripts PHP GZ Hotel Booking Script load.php cross site scripting

A vulnerability, which was classified as problematic, was found in GZ Scripts PHP GZ Hotel Booking Script 1.8. This affects an unknown part of the file /load.php. The manipulation of the argument firstname/secondname/phone/address1/country leads to cross site scripting. It is possible to initiate...

CVE-2023-3560 GZ Scripts Ticket Booking Script load.php cross site scripting

A vulnerability, which was classified as problematic, has been found in GZ Scripts Ticket Booking Script 1.8. Affected by this issue is some unknown functionality of the file /load.php. The manipulation of the argument firstname/secondname/phone/address1/country leads to cross site scripting. The...

CVE-2023-3560

CVE-2023-3560 relates to a cross-site scripting vulnerability in GZ Scripts Ticket Booking Script 1.8, specifically affecting the /load.php functionality. The root cause is improper handling of input parameters (first_name/second_name/phone/address_1/country), enabling remote attacker-controlled ...

CVE-2023-3559 GZ Scripts PHP GZ Appointment Scheduling Script load.php cross site scripting

A vulnerability classified as problematic was found in GZ Scripts PHP GZ Appointment Scheduling Script 1.8. Affected by this vulnerability is an unknown functionality of the file /load.php. The manipulation of the argument firstname/secondname/phone/address1/country leads to cross site scripting...

CVE-2023-3558

CVE-2023-3558 affects GZ Scripts Event Booking Calendar version 1.8, specifically the /load.php file. The vulnerability arises from manipulation of parameters (first_name, second_name, phone, address_1, country) leading to cross-site scripting. The issue is described as exploitable remotely in mu...

CVE-2023-3557 GZ Scripts Property Listing Script preview.php cross site scripting

A vulnerability was found in GZ Scripts Property Listing Script 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /preview.php. The manipulation of the argument page/layout/sortby leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2023-3557 GZ Scripts Property Listing Script preview.php cross site scripting

A vulnerability was found in GZ Scripts Property Listing Script 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /preview.php. The manipulation of the argument page/layout/sortby leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2023-3557

CVE-2023-3557 affects GZ Scripts Property Listing Script 1.0. A cross-site scripting vulnerability arises from manipulating the /preview.php argument page/layout/sort_by, with remote exploitation potential. Multiple sources confirm this issue but do not provide a fix in the initial record. Remedi...

CVE-2023-3556 GZ Scripts Car Listing Script PHP preview.php cross site scripting

A vulnerability was found in GZ Scripts Car Listing Script PHP 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file /preview.php. The manipulation of the argument page/sortby leads to cross site scripting. The attack can be initiated remotely. VDB-233350 i...