CVE-2023-5988

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies LioXERP allows Reflected XSS. This issue affects LioXERP: before v.146...

CVE-2023-5989

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies' LioXERP allows an authenticated user to execute Stored XSS. This issue affects LioXERP: before v.146...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies LioXERP allows Stored XSS.This issue affects LioXERP: before v.146...

CVE-2023-5989

CVE-2023-5989 describes a Stored XSS in Uyumsoft Information System and Technologies’ LioXERP (versions prior to v.146). The root cause is improper neutralization of input during web page generation , allowing an authenticated user to inject scripts that are stored and later executed. Affected pr...

CVE-2023-5989 Stored XSS in Uyumsoft ERP

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies' LioXERP allows an authenticated user to execute Stored XSS. This issue affects LioXERP: before v.146...

CVE-2023-5988 Reflected XSS in Uyumsoft ERP

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies LioXERP allows Reflected XSS. This issue affects LioXERP: before v.146...

CVE-2023-5988

CVE-2023-5988 is a Reflected XSS in Uyumsoft LioXERP prior to v1.46. The root cause is improper neutralization of input during web page generation, allowing reflected script execution. Affected: LioXERP versions before 146. Remediation: upgrade to version 146 or later (per PT-Security guidance pr...

CVE-2023-5988 Reflected XSS in Uyumsoft ERP

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies LioXERP allows Reflected XSS. This issue affects LioXERP: before v.146...

CVE-2023-5011

Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursename' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-5007

Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'id' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-5007

Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'id' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database...

Sql injection

Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursecode' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-5007

The CVE-2023-5007 entries describe an authenticated SQL injection in Student Information System v1.0, specifically in marks.php where the id parameter is not validated and is sent to the database unfiltered. Concrete details across connected docs: vulnerable component is marks.php (id parameter);...

CVE-2023-5010 Student Information System v1.0 - Multiple Authenticated SQL Injections (SQLi)

Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursecode' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database...

Student Information System SQL Injection Vulnerability

Student Information System is a web-based application platform by Carlo Montero, a personal developer. It can help a university or college to manage student information and academic records. A SQL injection vulnerability exists in Student Information System v1.0, which stems from a coursecode...

Student Information System SQL Injection Vulnerability

Student Information System is a web-based application platform by Carlo Montero, a personal developer. It can help a university or college to manage student information and academic records. A SQL injection vulnerability exists in Student Information System v1.0, which stems from the coursename...

PT-2023-31476

Name of the Vulnerable Software and Affected Versions Student Information System version 1.0 Description The issue concerns multiple Authenticated SQL Injection vulnerabilities. Specifically, the coursename parameter of the "marks.php" resource does not validate the characters received and they a...

CVE-2023-5007: Improper Neutralization of Special Elements used in an SQL Command

Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'id' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-5010: Improper Neutralization of Special Elements used in an SQL Command

Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursecode' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-5011: Improper Neutralization of Special Elements used in an SQL Command

Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursename' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database...