CVE-2020-10436: Improper Neutralization of Input During Web Page Generation

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/my-profile.php by adding a question mark ? followed by the payload...

PT-2017-14888

Name of the Vulnerable Software and Affected Versions Simple Chatting System version 1.0 Description The issue allows for Arbitrary File Upload through the "view/my profile.php" endpoint, which stores uploaded files in the "uploads/" directory. Recommendations For Simple Chatting System version...

PT-2017-14310

Name of the Vulnerable Software and Affected Versions Ingenious School Management System version 2.3.0 Description The issue allows a student or teacher to upload an arbitrary file through the my profile.php script. Recommendations For Ingenious School Management System version 2.3.0, restrict...