Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/02/17 1:27 p.m.3 views

CVE-2026-2553

A security flaw has been discovered in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. This affects an unknown part of the file /home.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Name/Email results in sql injection...

6.5CVSS5.6AI score0.00192EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/16 11:32 a.m.4 views

CVE-2026-2553

A security flaw has been discovered in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. This affects an unknown part of the file /home.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Name/Email results in sql injection...

6.5CVSS5.6AI score0.00192EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/02/16 11:32 a.m.26 views

CVE-2026-2553 tushar-2223 Hotel-Management-System HTTP POST Request home.php sql injection

A security flaw has been discovered in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. This affects an unknown part of the file /home.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Name/Email results in sql injection...

6.5CVSS0.00192EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/02/16 12:0 a.m.6 views

PT-2026-8337

Name of the Vulnerable Software and Affected Versions tushar-2223 Hotel-Management-System versions up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15 Description A security flaw exists in tushar-2223 Hotel-Management-System. The issue is related to SQL injection within the HTTP POST Request Handler...

6.5CVSS6.4AI score0.00192EPSS
Exploits0References9
NVD
NVD
added 2024/02/29 2:15 a.m.11 views

CVE-2023-51800

Cross Site Scripting XSS vulnerability in School Fees Management System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the mainsettings component in the phone, address, bank, accname, accnumber parameters, newclass and cname parameter, addnewparent function in t...

6.1CVSS6.1AI score0.00628EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/02/29 12:0 a.m.17 views

CVE-2023-51800

Cross Site Scripting XSS vulnerability in School Fees Management System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the mainsettings component in the phone, address, bank, accname, accnumber parameters, newclass and cname parameter, addnewparent function in t...

6.3AI score0.00628EPSS
Exploits1References1
OSV
OSV
added 2024/01/07 6:15 p.m.6 views

CVE-2024-0286

A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file index.phpcontactus of the component Contact Form. The manipulation of the argument Name/Email/Message leads to cross site scripting. It is possibl...

6.1CVSS3.7AI score
Exploits0References3
CNNVD
CNNVD
added 2024/01/07 12:0 a.m.5 views

PHPGurukul Hospital Management System Cross-Site Scripting Vulnerability

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. A cross-site scripting vulnerability exists in PHPGurukul Hospital Management System version 1.0, which originates in the component Contact Form, index.phpcontactus, which contains an unknown section that...

6.1CVSS6AI score0.00877EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/12/28 12:0 a.m.3 views

PT-2023-32900 · Unknown · Code-Projects Client Details System

Name of the Vulnerable Software and Affected Versions: code-projects Client Details System version 1.0 Description: A vulnerability has been found in the code-projects Client Details System, affecting the file /admin/regester.php of the component HTTP POST Request Handler. The manipulation of the...

9.8CVSS5.7AI score0.00644EPSS
Exploits1References6
ATTACKERKB
ATTACKERKB
added 2023/11/21 3:15 p.m.1 views

CVE-2023-48124

Cross Site Scripting in SUP Online Shopping v.1.0 allows a remote attacker to execute arbitrary code via the Name, Email and Address parameters in the Register New Account component...

5.4CVSS6.2AI score0.00633EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/11/21 12:0 a.m.4 views

PT-2023-30709

Name of the Vulnerable Software and Affected Versions SUP Online Shopping version 1.0 Description The issue allows a remote attacker to execute arbitrary code via the Name, Email, and Address parameters in the "Register New Account" component. This enables the attacker to perform Cross Site...

5.4CVSS6.2AI score0.00633EPSS
Exploits1References7
NVD
NVD
added 2021/08/20 5:15 p.m.14 views

CVE-2021-34207

Cross-site scripting in ddns.htm in TOTOLINK A3002R version V1.1.1-B20200824 Important Update, new UI allows attackers to execute arbitrary JavaScript by modifying the "Domain Name" field, "Server Address" field, "User Name/Email", or "Password/Key" field...

6.1CVSS0.00662EPSS
Exploits1References1
Prion
Prion
added 2021/08/20 5:15 p.m.14 views

Cross site scripting

Cross-site scripting in ddns.htm in TOTOLINK A3002R version V1.1.1-B20200824 Important Update, new UI allows attackers to execute arbitrary JavaScript by modifying the "Domain Name" field, "Server Address" field, "User Name/Email", or "Password/Key" field...

4.3CVSS6.4AI score0.00662EPSS
Exploits1References1Affected Software1
Kitploit
Kitploit
added 2018/05/01 9:18 p.m.16 views

Gitmails - An Information Gathering Tool To Colect Git Commit Emails In Version Control Host Services

An information gathering tool to colect git commit emails in version control host services. Overview Gitmails explores that git commits contains a name and an email configured by the author and that version control host services are being used to store a lot of projects. What Gitmails does is:...

7.4AI score
Exploits0References2
Rows per page
Query Builder