CVE-2022-2767: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in SourceCodester Online Admission System. This affects an unknown part of the file /index.php. The manipulation of the argument studentadd leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

CVE-2022-2749: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Gym Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mygym/admin/index.php?viewexercises. The manipulation leads to unrestricted upload. The attack can be launched remotely. The...

CVE-2022-2728: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Gym Management System. It has been rated as critical. Affected by this issue is some unknown functionality of the file /mygym/admin/index.php. The manipulation of the argument edittran leads to sql injection. The attack may be launched remotely. The...

Ubuntu 18.04 LTS / 20.04 LTS : phpLiteAdmin vulnerability (USN-5552-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5552-1 advisory. It was discovered that phpLiteAdmin incorrectly handled certain GET requests. An attacker could possibly use this issue to perform cross-site scriptin...

Sql injection

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been classified as critical. This affects an unknown part of the file index.php. The manipulation of the argument username with the input ' AND SELECT 4955 FROM SELECTSLEEP5RSzF AND 'htiy'='htiy leads to s...

CVE-2022-2677: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been classified as critical. This affects an unknown part of the file index.php. The manipulation of the argument username with the input ' AND SELECT 4955 FROM SELECTSLEEP5RSzF AND 'htiy'='htiy leads to s...

PT-2022-18069 · Unknown · Sourcecodester Apartment Visitor Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Apartment Visitor Management System version 1.0 Description: A critical issue has been found, affecting an unknown part of the file index.php. The manipulation of the username argument with a specific input leads to SQL...

CVE-2022-2646

A vulnerability, which was classified as problematic, was found in SourceCodester Online Admission System. Affected is an unknown function of the file index.php. The manipulation of the argument eid with the input 8alert1 leads to cross site scripting. It is possible to launch the attack remotely...

Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Online Admission System. Affected is an unknown function of the file index.php. The manipulation of the argument eid with the input 8alert1 leads to cross site scripting. It is possible to launch the attack remotely...

CVE-2022-2646

SourceCodester Online Admission System is affected by a cross-site scripting vulnerability in an unknown function of index.php. The eid parameter can be manipulated with input such as 8, allowing remote exploitation. Multiple connected reports corroborate the flaw and its remote abuse. Several so...

CVE-2022-2646: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Online Admission System. Affected is an unknown function of the file index.php. The manipulation of the argument eid with the input 8 leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2022-34580

CVE-2022-34580 affects Advanced School Management System v1.0. The issue is a cross-site scripting (XSS) vulnerability exploitable via the address parameter at ip/school/index.php. Documented CVSS: 4.8 (MEDIUM) with network attack vector, high privileges required and user interaction. APT/Exploit...

CVE-2022-34580: Improper Neutralization of Input During Web Page Generation

Advanced School Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the address parameter at ip/school/index.php...

CVE-2022-34140: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in /index.php?r=site%2Fsignup of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username field...

CVE-2022-34611: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "Contac " text field...

PT-2022-16982

Name of the Vulnerable Software and Affected Versions SourceCodester Library Management System version 1.0 Description A critical issue affects the processing of the file /index.php. The manipulation of the argument RollNo with a specific input leads to sql injection. The attack can be initiated...

CVE-2022-2492: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Library Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /index.php. The manipulation of the argument RollNo with the input admin' AND SELECT 2625 FROM SELECTSLEEP5MdIL AND...

CVE-2017-20126 KB Affiliate Referral Script index.php sql injection

A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. It is possible to initiate the attack remotely...

CVE-2017-20126 KB Affiliate Referral Script index.php sql injection

A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. It is possible to initiate the attack remotely...

CVE-2017-20126: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. It is possible to initiate the attack remotely...