307 matches found
PHPGurukul Hostel Management System 跨站脚本漏洞
PHPGurukul Hostel Management System is a hostel management system. A security vulnerability exists in PHPGurukul Hostel Management System version 1.0, which stems from a stored cross-site scripting XSS vulnerability...
Hostel Management System 2.1 - Cross Site Scripting Vulnerability
Exploit Title: Hostel Management System 2.1 - Cross Site Scripting XSS Exploit Author: Chinmay Vishwas Divekar Vendor Homepage: https://phpgurukul.com/hostel-management-system/ Software Link: https://phpgurukul.com/hostel-management-system/ Version: V 2.1 Tested on: PopOS20.10 Steps to reproduce ...
Hostel Management System 2.1 - Cross Site Scripting (XSS)
Exploit Title: Hostel Management System 2.1 - Cross Site Scripting XSS Date: 26/12/2021 Exploit Author: Chinmay Vishwas Divekar Vendor Homepage: https://phpgurukul.com/hostel-management-system/ Software Link: https://phpgurukul.com/hostel-management-system/ Version: V 2.1 Tested on: PopOS20.10...
Hostel Management System my-profile.php File Cross-Site Request Forgery Vulnerability
Hostel Management System is a hostel management system. Hostel Management System suffers from a cross-site request forgery vulnerability that stems from a lack of effective filtering and restriction of the name field in my-profile.php in the software, no details of the vulnerability are available...
CVE-2021-43137
Cross-Site Scripting XSS and Cross-Site Request Forgery CSRF vulnerability exits in hostel management system 2.1 via the name field in my-profile.php. Chaining to this both vulnerabilities leads to account takeover...
CVE-2021-43137
Cross-Site Scripting XSS and Cross-Site Request Forgery CSRF vulnerability exits in hostel management system 2.1 via the name field in my-profile.php. Chaining to this both vulnerabilities leads to account takeover...
Cross site request forgery (csrf)
Cross-Site Scripting XSS and Cross-Site Request Forgery CSRF vulnerability exits in hostel management system 2.1 via the name field in my-profile.php. Chaining to this both vulnerabilities leads to account takeover...
CVE-2021-43137
Cross-Site Scripting XSS and Cross-Site Request Forgery CSRF vulnerability exits in hostel management system 2.1 via the name field in my-profile.php. Chaining to this both vulnerabilities leads to account takeover...
CVE-2021-43137
CVE-2021-43137 affects the hostel management system version 2.1, with a Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability in the name field of my-profile.php . The connected PT-2021-23750 entry provides concrete details: exploiting the name field via my-profile.php ca...
PHPGurukul Hostel Management System 跨站脚本漏洞
Hostel Management System is a hostel management system. Hostel Management System suffers from a cross-site request forgery vulnerability that stems from a lack of effective filtering and restriction of the name field in my-profile.php in the software, no details of the vulnerability are available...
CVE-2021-43137: Improper Neutralization of Input During Web Page Generation
Cross-Site Scripting XSS and Cross-Site Request Forgery CSRF vulnerability exits in hostel management system 2.1 via the name field in my-profile.php. Chaining to this both vulnerabilities leads to account takeover...
PT-2021-23750 · Unknown · Hospital Management System
Name of the Vulnerable Software and Affected Versions: hostel management system version 2.1 Description: The issue concerns Cross-Site Scripting XSS and Cross-Site Request Forgery CSRF vulnerabilities. These vulnerabilities exist via the name field in the "my-profile.php" page. By chaining these...
Hostel Management System 2.1 - Cross Site Scripting (Multiple Fields)
Exploit Title: PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, City Google Dork: N/A Date: 2020-10-08 Exploit Author: Kokn3t Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/hostel-management-syste...
CVE-2020-25270
PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City...
CVE-2020-25270
PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City...
Cross site scripting
PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City...
CVE-2020-25270
PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City...
CVE-2020-25270
CVE-2020-25270 affects PHPGurukul hostel-management-system version 2.1. It specifies a cross-site scripting (XSS) vulnerability via input fields in the Guardian section (Guardian Name, Guardian Relation, Guardian Contact no, Address, City) that can trigger script execution. Multiple connected sou...
CVE-2020-25270: Improper Neutralization of Input During Web Page Generation
PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City...