516 matches found
PT-2022-16772 · Unknown · Hospital Management System
Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4.0 Description: The issue is related to a SQL injection vulnerability. It affects the /Hospital-Management-System-master/contact.php endpoint via the txtMsg parameters. Recommendations: For Hospital...
PT-2022-12702
Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Chatbot Application version 1.0 Description An SQL Injection issue exists via the message parameter in Master.php. This allows for potential exploitation. Recommendations For version 1.0, avoid using the message parameter...
CVE-2021-46427: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the message parameter in Master.php...
Simple Chatbot Application SQL注入漏洞
Simple Chatbot Application is a chatbot application. version 1.0 of Simple Chatbot Application is vulnerable to SQL injection, which can be exploited by attackers via the message parameter in master.php...
CVE-2021-39420
Multiple Cross Site Scripting XSS vulnerabilities exist in VFront 0.99.5 via the 1 s parameter in searchall.php and the 2 msg parameter in add.attach.php...
CVE-2021-42663
An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clicks on a...
CVE-2021-24632
The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.1 does not escape the message parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...
CVE-2021-24632
The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.1 does not escape the message parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...
PT-2021-16148
Name of the Vulnerable Software and Affected Versions The Recipe Card Blocks by WPZOOM WordPress plugin versions prior to 2.8.1 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the message parameter is not properly escaped before being outputted back...
CVE-2021-24632: Improper Neutralization of Input During Web Page Generation
The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.1 does not escape the message parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...
CVE-2021-38359
The WordPress InviteBox Plugin for viral Refer-a-Friend Promotions WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.1...
CVE-2021-38359
The WordPress InviteBox Plugin for viral Refer-a-Friend Promotions WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.1...
PT-2021-22079
Name of the Vulnerable Software and Affected Versions WordPress InviteBox Plugin versions up to and including 1.4.1 Description The WordPress InviteBox Plugin is affected by a Reflected Cross-Site Scripting issue. This is due to the message parameter in the /admin/admin.php file, which allows...
CVE-2021-38359: Improper Neutralization of Input During Web Page Generation
The WordPress InviteBox Plugin for viral Refer-a-Friend Promotions WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.1...
CVE-2021-27940
resources/public/js/orchestrator.js in openark orchestrator before 3.2.4 allows XSS via the orchestrator-msg parameter...
CVE-2021-3340
A cross-site scripting XSS vulnerability in many forms of Wikindx before 5.7.0 and 6.x through 6.4.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter to index.php?action=initLogon or modules/admin/DELETEIMAGES.php...
CVE-2021-3340
A cross-site scripting XSS vulnerability in many forms of Wikindx before 5.7.0 and 6.x through 6.4.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter to index.php?action=initLogon or modules/admin/DELETEIMAGES.php...
CVE-2021-3340: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in many forms of Wikindx before 5.7.0 and 6.x through 6.4.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter to index.php?action=initLogon or modules/admin/DELETEIMAGES.php...
PT-2021-20133
Name of the Vulnerable Software and Affected Versions Wikindx versions prior to 5.7.0 Wikindx versions 6.x through 6.4.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the message parameter to "index.php?action=initLogon" or...
Wikindx Cross-Site Scripting Vulnerability
Wikindx is a virtual research environment online bibliography and quote/notes management and article creation system. Wikindx before 5.7.0 and 6.x through 6.4.0 suffers from a cross-site scripting vulnerability that originates from the message parameter in index.php?action=initLogon or...