13403 matches found
CVE-2021-27520
A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter...
CVE-2021-27519: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter...
PT-2021-17491
Name of the Vulnerable Software and Affected Versions FUDForum version 3.1.0 Description A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the "index.php" endpoint in the srch parameter. Recommendations For FUDForum version 3.1.0, consider disabling the srch...
CVE-2021-27520: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter...
PT-2021-17492
Name of the Vulnerable Software and Affected Versions FUDForum version 3.1.0 Description A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the "index.php" endpoint in the author parameter. Recommendations For FUDForum version 3.1.0, as a temporary workaround,...
CVE-2020-24877: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in zzzphp v1.8.0 through /form/index.php?module=getjson may lead to a possible access restriction bypass...
PT-2021-11077
Name of the Vulnerable Software and Affected Versions: zzzphp version 1.8.0 Description: A SQL injection issue may lead to a possible access restriction bypass. The /form/index.php?module=getjson endpoint is affected. Recommendations: For zzzphp version 1.8.0, consider restricting access to the...
Seat-Reservation-System SQL Injection Vulnerability
Seat-Reservation-System is a seat reservation system. A sql injection vulnerability exists in Seat-Reservation-System 1.0. The vulnerability is caused due to the id and file parameters in the index.php file not being input/output filtered for special characters. An attacker can exploit this...
Sql injection
Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information...
CVE-2020-36002
Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information...
CVE-2020-36002
CVE-2020-36002 affects Seat-Reservation-System 1.0. A SQL injection in index.php parameter id (and related file param per PT-2021-11898) can lead to disclosure of sensitive database information. No official patch/version is detailed in the provided sources; mitigations include parameter access re...
PT-2021-11898 · Unknown · Seat Reservation System
Name of the Vulnerable Software and Affected Versions: Seat-Reservation-System version 1.0 Description: The issue is related to a SQL injection vulnerability in the index.php file, specifically affecting the id and file parameters. This allows attackers to obtain sensitive database information...
CVE-2020-36002: Improper Neutralization of Special Elements used in an SQL Command
Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information...
CVE-2021-3293
emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file...
CVE-2021-3293
Affected software: emlog v5.3.1. Vulnerability: full path disclosure in t/index.php, enabling an attacker to view the path to the webroot/file. Root cause/impact: information disclosure of the server’s filesystem structure; no explicit exploit details provided in the documents. Exploitation statu...
CVE-2021-3293
emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file...
CVE-2021-3293
emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file...
Sql injection
College Management System Php 1.0 suffers from SQL injection vulnerabilities in the index.php page from POST parameters 'unametxt' and 'pwdtxt', which are not filtered before passing a SQL query...
CVE-2020-26051: Improper Neutralization of Special Elements used in an SQL Command
College Management System Php 1.0 suffers from SQL injection vulnerabilities in the index.php page from POST parameters 'unametxt' and 'pwdtxt', which are not filtered before passing a SQL query...