175 matches found
Cross site scripting
A vulnerability was found in code-projects Intern Membership Management System 2.0. It has been classified as problematic. This affects an unknown part of the file /userregistration/ of the component User Registration. The manipulation of the argument userName/firstName/lastName/userEmail with th...
CVE-2023-7132
CVE-2023-7132 affects code-projects Intern Membership Management System 2.0, specifically the User Registration component’s /user_registration/ path. The issue is a cross-site scripting vulnerability caused by reflecting manipulated values for userName, firstName, lastName, or userEmail, with pay...
CVE-2023-7131
CVE-2023-7131 affects code-projects Intern Membership Management System 2.0, specifically the User Registration component. The vulnerability resides in the /user_registration/ file where manipulating the userName argument enables SQL injection. Exploit details are publicly disclosed; no fix detai...
Intern Membership Management System security breach
Intern Membership Management System is an intern membership management system. A security vulnerability exists in Intern Membership Management System. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...
Intern Membership Management System Cross-Site Scripting Vulnerability
Intern Membership Management System is an intern membership management system. A cross-site scripting vulnerability exists in Intern Membership Management System. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...
GHSA-GCH5-HWQF-MXHP Unsoundness in `intern` methods on `intaglio` symbol interners
Affected versions of this crate have a stacked borrows violation when creating references to interned contents. All interner types are affected. The flaw was corrected in version 1.9.0 by reordering move and borrowing operations and storing interned contents by raw pointer instead of as a Box...
Unsoundness in `intern` methods on `intaglio` symbol interners
Affected versions of this crate have a stacked borrows violation when creating references to interned contents. All interner types are affected. The flaw was corrected in version 1.9.0 by reordering move and borrowing operations and storing interned contents by raw pointer instead of as a Box...
RUSTSEC-2023-0048 Unsoundness in `intern` methods on `intaglio` symbol interners
Affected versions of this crate have a stacked borrows violation when creating references to interned contents. All interner types are affected. The flaw was corrected in version 1.9.0 by reordering move and borrowing operations and storing interned contents by raw pointer instead of as a Box...
Intern Record System v1.0 - SQL Injection (Unauthenticated) Vulnerability
Exploit Title: Intern Record System v1.0 - SQL Injection Unauthenticated Exploit Author: Hamdi Sevben Vendor Homepage: https://code-projects.org/intern-record-system-in-php-with-source-code/ Software Link: https://download-media.code-projects.org/2020/03/InternRecordSystemInPHPWithSourceCode.zip...
Intern Record System 1.0 SQL Injection
Exploit Title: Intern Record System v1.0 - SQL Injection Unauthenticated Date: 2022-06-09 Exploit Author: Hamdi Sevben Vendor Homepage: https://code-projects.org/intern-record-system-in-php-with-source-code/ Software Link:...
CVE-2022-40348
Cross Site Scripting XSS vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, allows attackers to execute arbitrary code...
CVE-2022-40348
Cross Site Scripting XSS vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, allows attackers to execute arbitrary code...
Cross site scripting
Cross Site Scripting XSS vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, allows attackers to execute arbitrary code...
CVE-2022-40348
Cross Site Scripting XSS vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, allows attackers to execute arbitrary code...
CVE-2022-40348
Cross Site Scripting XSS vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, allows attackers to execute arbitrary code...
CVE-2022-40348
CVE-2022-40348 affects Intern Record System v1.0, vulnerable in /intern/controller.php where the name and email fields are unsafely handled, allowing stored/reflected XSS to trigger arbitrary script execution in the context of the affected site. Public references (NVD/Red Hat/CVE listings) descri...
Intern Record System 跨站脚本漏洞
Intern Record System is an intern record system from the individual developers at Codeprojects. A security vulnerability exists in Intern Record System version 1.0. An attacker can exploit this vulnerability to execute arbitrary code...
CVE-2022-40347
SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information...
CVE-2022-40347
SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information...
Sql injection
SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information...