108 matches found
CVE-2021-36646
A Cross Site Scrtpting XSS vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page...
CVE-2021-36646
CVE-2021-36646 – KodExplorer 4.45 : Several connected sources confirm a cross-site scripting (XSS) issue. The nuclei template specifies a reflected XSS in the file view functionality, specifically in app/template/api/view.html where the path parameter is echoed unsafely, enabling attacker-supplie...
CVE-2023-37150: Improper Neutralization of Input During Web Page Generation
Sourcecodester Online Pizza Ordering System v1.0 has a Cross-site scripting XSS vulnerability in "/admin/index.php?page=categories" Category item...
CVE-2023-2962: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SourceCodester Faculty Evaluation System 1.0. Affected by this issue is some unknown functionality of the file index.php?page=edituser. The manipulation of the argument id leads to sql injection. The attack may be launched...
CVE-2023-31842: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/index.php?page=editfaculty&id=...
CVE-2023-2368: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file index.php?page=managequestionnaire. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. Th...
CVE-2023-0987: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file index.php?page=checkout. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed...
CVE-2023-0945: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0. Affected is an unknown function of the file index.php?page=add-category. The manipulation of the argument Name with the input " leads to cross site scripting. It is possible to launch...
CVE-2022-46968: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in /index.php?page=help of Revenue Collection System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into sent messages...
PT-2023-15123
Name of the Vulnerable Software and Affected Versions Revenue Collection System version 1.0 Description A stored cross-site scripting issue exists, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into sent messages, specifically in the /index.php?page=he...
CVE-2022-47790: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Dynamic Transaction Queuing System v1.0 is vulnerable to SQL Injection via /queuing/index.php?page=display&id=...
CVE-2022-4738: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in SourceCodester Blood Bank Management System 1.0. Affected is an unknown function of the file index.php?page=users of the component User Registration Handler. The manipulation of the argument Name leads to cross site scripting. It is...
CVE-2022-40088: Improper Neutralization of Input During Web Page Generation
Simple College Website v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /collegewebsite/index.php?page=. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter...
PT-2022-21080
Name of the Vulnerable Software and Affected Versions Inout Homestay version 2.2 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the guests parameter at the "/index.php?page=search/rentals" API endpoint. Recommendations For Inout Homestay...
PT-2022-21054
Name of the Vulnerable Software and Affected Versions Car Rental Management System version 1.0 Description The issue is related to SQL Injection. It can be exploited via the "/car-rental-management-system/admin/index.php?page=manage car&id=" endpoint, where the id parameter is vulnerable...
PT-2022-18741
Name of the Vulnerable Software and Affected Versions Movie Seat Reservation version 1 Description The issue is related to a SQL injection vulnerability. It affects the "/index.php?page=reserve" API endpoint via the id parameter. Recommendations For Movie Seat Reservation version 1, as a temporar...
PT-2022-18742
Name of the Vulnerable Software and Affected Versions Movie Seat Reservation version 1 Description The issue is related to an unauthenticated file disclosure vulnerability. This vulnerability can be exploited via the "/index.php?page=home" API endpoint. Recommendations For Movie Seat Reservation...
CVE-2022-28001: Improper Neutralization of Special Elements used in an SQL Command
Movie Seat Reservation v1 was discovered to contain a SQL injection vulnerability at /index.php?page=reserve via the id parameter...
