CVE-2023-31942

Cross Site Scripting vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the description parameter in insert.php...

CVE-2023-31942

Cross Site Scripting vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the description parameter in insert.php...

CVE-2023-31942: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the description parameter in insert.php...

PT-2023-23539

Name of the Vulnerable Software and Affected Versions Online Travel Agency System version 1.0 Description A remote attacker can execute arbitrary code via a crafted PHP file to the "employee insert.php" endpoint. This allows for the potential execution of malicious code, posing a significant risk...

PT-2023-23540

Name of the Vulnerable Software and Affected Versions Online Travel Agency System version 1.0 Description A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the description parameter in the "insert.php" endpoint. This enables the attacker to perform unauthorized...

Barcodes generator 1.0 - 'name' Stored Cross Site Scripting

Exploit Title: Barcodes generator 1.0 - 'name' Stored Cross Site Scripting Date: 10/12/2020 Exploit Author: Nikhil Kumar Vendor Homepage: http://egavilanmedia.com/ Software Link: http://egavilanmedia.com/barcodes-generator-using-php-mysql-and-jsbarcode-library/ Version: 1.0 Tested On: Ubuntu 1...

CVE-2017-11416

Fiyo CMS 2.0.7 has SQL injection in /apps/appcomment/controller/insert.php via the name parameter...

CVE-2017-11416: Improper Neutralization of Special Elements used in an SQL Command

Fiyo CMS 2.0.7 has SQL injection in /apps/appcomment/controller/insert.php via the name parameter...

PT-2017-11998

Name of the Vulnerable Software and Affected Versions Fiyo CMS version 2.0.7 Description The issue concerns SQL injection. It can be exploited via the name parameter in the /apps/app comment/controller/insert.php API endpoint. Recommendations For Fiyo CMS version 2.0.7, avoid using the name...

CVE-2015-5064: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in MySql Lite Administrator mysql-lite-administrator beta-1 allow remote attackers to inject arbitrary web script or HTML via the tablename parameter to 1 tabella.php, 2 coloni.php, or 3 insert.php or 4 numrow parameter to coloni.php...

PT-2015-6762

Name of the Vulnerable Software and Affected Versions mysql-lite-administrator version beta-1 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the table name parameter to API endpoints such as "tabella.php", "coloni.php", or...