2 matches found
CVE-2026-13499: Improper Neutralization of Input During Web Page Generation
A security flaw has been discovered in yashpokharna2555 restaurent-management-system. This impacts an unknown function of the file loginregister.php of the component Registration Handler. Performing a manipulation of the argument Username results in cross site scripting. The attack may be initiat...
5.3CVSS3.7AI score0.0047EPSS
SaveExploits0References3
CVE-2005-4469: Undefined Security Weakness
Multiple direct static code injection vulnerabilities in PHPGedView 3.3.7 and earlier allow remote attackers to execute arbitrary PHP code via 1 the username field in login.php, or the 2 userlanguage, 3 useremail, and 4 usergedcomid parameters in loginregister.php, which is directly inserted into...
7.5CVSS6.4AI score0.02661EPSS
SaveExploits1References1
20