Online Student Enrollment System SQL注入漏洞

Online Student Enrollment System is an online student enrollment system by Lyndon Bermoy, an individual developer. A SQL injection vulnerability exists in Online Student Enrollment System version 1.0, which can be exploited by an attacker to view, add, modify, or delete information in the back-en...

CVE-2024-5390: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in itsourcecode Online Student Enrollment System 1.0. Affected is an unknown function of the file listofstudent.php. The manipulation of the argument lname leads to sql injection. It is possible to launch the attack remotely. The exploi...

Campcodes Online Marriage Registration System 跨站脚本漏洞

Online Marriage Registration System is a website builder that supports online marriage registration. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Online Marriage Registration System, which stems from a cross-site scripting vulnerability in the lname parameter of the...

PT-2024-22023 · Unknown · Campcodes Online Marriage Registration System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Marriage Registration System version 1.0 Description: A problematic issue has been found in the system, affecting the processing of the file /user/user-profile.php. The manipulation of the argument lname leads to cross-site...

CVE-2024-2775: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in Campcodes Online Marriage Registration System 1.0. This issue affects some unknown processing of the file /user/user-profile.php. The manipulation of the argument lname leads to cross site scripting. The attack may be initiat...

CVE-2023-7143: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Client Details System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/regester.php. The manipulation of the argument fname/lname/email/contact leads to cross site scripting. The attack may be...

CVE-2023-7139: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Client Details System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/regester.php of the component HTTP POST Request Handler. The manipulation of the argument fname/lname/email/contact leads to sql...

libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c

A vulnerability was found in Libiberty. A heap and stack buffer overflow found in the dlanglname function in d-demangle.c leads to a denial of service...

CVE-2023-40851: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to run arbitrary code via fname, lname, email, and contact fields of the user registration page...

libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c

A vulnerability was found in Libiberty. A heap and stack buffer overflow found in the dlanglname function in d-demangle.c leads to a denial of service...

SUSE CVE-2021-3826

Heap/stack buffer overflow in the dlanglname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service segmentation fault and crash via a crafted mangled symbol...

DEBIAN-CVE-2021-3826

Heap/stack buffer overflow in the dlanglname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service segmentation fault and crash via a crafted mangled symbol...

CVE-2022-29005

Multiple cross-site scripting XSS vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname or lname parameters...

CVE-2022-29005: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname or lname parameters...

PT-2022-10702 · Libiberty +4 · Libiberty +4

Name of the Vulnerable Software and Affected Versions: libiberty affected versions not specified Description: The issue is related to a heap/stack buffer overflow in the dlang lname function in d-demangle.c, which can potentially cause a denial of service, leading to a segmentation fault and cras...

CVE-2021-32103

A Stored XSS vulnerability in interface/usergroup/usergroupadmin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web script or HTML via the lname parameter...

CVE-2021-32103

A Stored XSS vulnerability in interface/usergroup/usergroupadmin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web script or HTML via the lname parameter...

CVE-2021-32103

A Stored XSS vulnerability in interface/usergroup/usergroupadmin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web script or HTML via the lname parameter...

CVE-2021-32103: Improper Neutralization of Input During Web Page Generation

A Stored XSS vulnerability in interface/usergroup/usergroupadmin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web script or HTML via the lname parameter...

PT-2021-19669

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 5.0.2.1 Description: A Stored XSS issue allows an admin authenticated user to inject arbitrary web script or HTML via the lname parameter in the interface/usergroup/usergroup admin.php file. Recommendations: For...