629 matches found
Cross site scripting
Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting XSS via /ofrs/classes/Master.php...
Cross site scripting
Online Tutor Portal Site v1.0 is vulnerable to Cross Site Scripting XSS. via /otps/classes/Master.php...
CVE-2022-31912
Online Tutor Portal Site v1.0 is affected by SQL Injection in the /otps/classes/Master.php?f=delete_team path. The issue stems from missing SQL data filtering/escaping, enabling an attacker to potentially access or modify database data. Connected records (RH:CVE-2022-31912, NVD/CVE-2022-31912, CN...
CVE-2022-31912
Online Tutor Portal Site v1.0 is vulnerable to SQL Injection via /otps/classes/Master.php?f=deleteteam...
CVE-2022-31910
The CVE-2022-31910 entry concerns Online Tutor Portal Site v1.0 with a Cross-Site Scripting (XSS) vulnerability exploitable via /otps/classes/Master.php. The issue arises from lack of filtering/escaping of parameter data, enabling client-side JavaScript execution. Multiple connected sources (e.g....
CVE-2022-31910
Online Tutor Portal Site v1.0 is vulnerable to Cross Site Scripting XSS. via /otps/classes/Master.php...
CVE-2022-31913: Improper Neutralization of Input During Web Page Generation
Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting XSS via /odfs/classes/Master.php?f=savecategory, name...
CVE-2022-31906: Improper Neutralization of Input During Web Page Generation
Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting XSS via /ofrs/classes/Master.php...
CVE-2022-31912: Improper Neutralization of Special Elements used in an SQL Command
Online Tutor Portal Site v1.0 is vulnerable to SQL Injection via /otps/classes/Master.php?f=deleteteam...
CVE-2022-31911: Improper Neutralization of Special Elements used in an SQL Command
Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=deleteteam...
CVE-2022-31910: Improper Neutralization of Input During Web Page Generation
Online Tutor Portal Site v1.0 is vulnerable to Cross Site Scripting XSS. via /otps/classes/Master.php...
CVE-2022-32359
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=deletecategory...
CVE-2022-32352
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=deletepatientadmission...
CVE-2022-32348
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=deletedoctor...
CVE-2022-32351: Improper Neutralization of Special Elements used in an SQL Command
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=deletemessage...
CVE-2022-32347: Improper Neutralization of Special Elements used in an SQL Command
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=deleteroom...
CVE-2022-32330: Improper Neutralization of Special Elements used in an SQL Command
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=deletemenu...
CVE-2022-32332: Improper Neutralization of Special Elements used in an SQL Command
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=deletecategory...
CVE-2022-32359: Improper Neutralization of Special Elements used in an SQL Command
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=deletecategory...
CVE-2022-32348: Improper Neutralization of Special Elements used in an SQL Command
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=deletedoctor...