CVE-2022-34140: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in /index.php?r=site%2Fsignup of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username field...

CVE-2022-34611: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac " text field...

CVE-2022-2492: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Library Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /index.php. The manipulation of the argument RollNo with the input admin' AND SELECT 2625 FROM SELECTSLEEP5MdIL AND...

PT-2022-16982

Name of the Vulnerable Software and Affected Versions SourceCodester Library Management System version 1.0 Description A critical issue affects the processing of the file /index.php. The manipulation of the argument RollNo with a specific input leads to sql injection. The attack can be initiated...

CVE-2017-20126 KB Affiliate Referral Script index.php sql injection

A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. It is possible to initiate the attack remotely...

CVE-2017-20126 KB Affiliate Referral Script index.php sql injection

A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. It is possible to initiate the attack remotely...

PT-2022-7993

Name of the Vulnerable Software and Affected Versions KB Affiliate Referral Script version 1.0 Description A critical issue has been found in the software, affecting an unknown part of the file /index.php. The manipulation of the username and password arguments with the input 'or''=' leads to SQL...

CVE-2017-20126: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. It is possible to initiate the attack remotely...

CVE-2022-2293: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Simple Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /cissms/index.php/orders/create. The manipulation of the argument customername with the input leads to cross site...

Cross-Site Request Forgery (CSRF)

microweber/microweber is vulnerable to cross site request forgery. The vulnerability exists due to a dom XSS in index.php because the user input for type parameter is not properly escaped which allows an attacker to steal tokens and gain access to sensitive information resulting a csrf...

CVE-2022-32055

Inout Homestay v2.2 was discovered to contain a SQL injection vulnerability via the guests parameter at /index.php?page=search/rentals...

PT-2022-21080

Name of the Vulnerable Software and Affected Versions Inout Homestay version 2.2 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the guests parameter at the "/index.php?page=search/rentals" API endpoint. Recommendations For Inout Homestay...

CVE-2022-31856

Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemeznewsletteremail parameter at /index.php...

CVE-2022-31856

CVE-2022-31856 affects Newsletter Module v3.x with a SQL injection in the zemez_newsletter_email parameter at /index.php. Root cause is improper handling of this input, enabling unauthenticated network-exposed injection with high/critical impact on confidentiality, integrity, and availability (CV...

CVE-2022-31856: Improper Neutralization of Special Elements used in an SQL Command

Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemeznewsletteremail parameter at /index.php...

CVE-2022-33116

An issue in the jmpath variable in /modules/mindmap/index.php of GUnet Open eClass Platform aka openeclass v3.12.4 and below allows attackers to read arbitrary files via a directory traversal...

PT-2022-15255

Name of the Vulnerable Software and Affected Versions SourceCodester Library Management System version 1.0 Description A critical issue was found in the system, affecting an unknown function of the /card/index.php component. The manipulation of the image argument leads to unrestricted upload. Thi...

CVE-2022-33116: Improper Limitation of a Pathname to a Restricted Directory

An issue in the jmpath variable in /modules/mindmap/index.php of GUnet Open eClass Platform aka openeclass v3.12.4 and below allows attackers to read arbitrary files via a directory traversal...

PT-2022-21697

Name of the Vulnerable Software and Affected Versions GUnet Open eClass Platform versions 3.12.4 and below Description An issue in the jmpath variable in the "/modules/mindmap/index.php" endpoint of GUnet Open eClass Platform allows attackers to read arbitrary files via a directory traversal...

CVE-2022-2212: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the component /card/index.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...