26 matches found
EUVD-2010-4948
Malware in sbrugna...
EUVD-2019-3124
Malware in sbrugna...
CVE-2024-55232
An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to delete notes belonging to other accounts due to missing authorization checks. This flaw enables attackers to delete another user's information...
CVE-2025-4509
PHPGurukul e-Diary Management System 1.0 is affected by a SQL injection in /manage-notes.php via the ID parameter. The vulnerability allows remote attacker input manipulation, potentially leading to unauthorized data access or modification. Publicly disclosed exploits exist. Acknowledged mitigati...
CVE-2025-4509 PHPGurukul e-Diary Management System manage-notes.php sql injection
A vulnerability, which was classified as critical, has been found in PHPGurukul e-Diary Management System 1.0. This issue affects some unknown processing of the file /manage-notes.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit ha...
CVE-2024-55232
An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to delete notes belonging to other accounts due to missing authorization checks. This flaw enables attackers to delete another user's information...
CVE-2023-7054 PHPGurukul Online Notes Sharing System add-notes.php unrestricted upload
A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /user/add-notes.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclose...
Design/Logic Flaw
I, Librarian 4.10 has XSS via the notes.php notes parameter...
CVE-2019-11449
I, Librarian 4.10 has XSS via the notes.php notes parameter...
CVE-2019-11449
CVE-2019-11449 affects I, Librarian 4.10 with an XSS vulnerability via the notes parameter in notes.php. The vulnerability is caused by unsanitized input in the notes parameter, enabling cross-site scripting when processed by the application. Impact details are limited in the provided documents; ...
Count Per Day <= 3.2.3 - notes.php note Parameter XSS
The Count per Day WordPress plugin was affected by a notes.php note Parameter XSS security vulnerability...
Cross site scripting
Cross-site scripting XSS vulnerability in notes.php in Rapidleech before 2.3 rev42 SVN r399 allows remote attackers to inject arbitrary web script or HTML via the notes parameter...
CVE-2011-5206
Cross-site scripting XSS vulnerability in notes.php in Rapidleech before 2.3 rev42 SVN r399 allows remote attackers to inject arbitrary web script or HTML via the notes parameter...
Wordpress Count per Day Plugin 3.2.3 XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: wordpress Count per Day Cross Site Scripting Vulnerability Google Dork:inurl:/wp-content/plugins/count-per-day Date: 08/24/2012 Author: Crim3R Version 3.2.3 Vendor Home :...
WordPress Plugin Count Per Day 3.2.3 - Cross-Site Scripting
WordPress Plugin Count Per Day 3.2.3 - Cross-Site Scripting Exploit Title: wordpress Count per Day Cross Site Scripting Vulnerability Google Dork:inurl:/wp-content/plugins/count-per-day Date: 08/24/2012 Author: Crim3R Version 3.2.3 Vendor Home :...
WordPress Plugin Count Per Day 3.2.3 - Cross-Site Scripting
Exploit Title: wordpress Count per Day Cross Site Scripting Vulnerability Google Dork:inurl:/wp-content/plugins/count-per-day Date: 08/24/2012 Author: Crim3R Version 3.2.3 Vendor Home : http://downloads.wordpress.org/plugin/count-per-day.3.2.3.zip Tested on: all $ $ Author will be not responsible...
WordPress Count Per Day 3.2.3 Cross Site Scripting
Exploit Title: wordpress Count per Day Cross Site Scripting Vulnerability Google Dork:inurl:/wp-content/plugins/count-per-day Date: 08/24/2012 Author: Crim3R Version 3.2.3 Vendor Home : http://downloads.wordpress.org/plugin/count-per-day.3.2.3.zip Tested on: all $ $ Author will be not responsible...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in freelancerKit 2.35 allow remote attackers to inject arbitrary web script or HTML via the 1 ticket parameter to tickets.php, 2 title parameter to notes.php, or 3 task parameter to todo.php. NOTE: some of these details are obtained from third par...
CVE-2010-4985
CVE-2010-4985 is an XSS vulnerability in notes.php of the My Kazaam Notes Management System. The issue allows injection of arbitrary script/HTML via the “Enter Reference Number Below” textbox, as described in the initial CVE entry and corroborated by multiple sources in the connected documents (N...
CVE-2010-4984
CVE-2010-4984 refers to an SQL injection vulnerability in notes.php of the My Kazaam Notes Management System. The vulnerability allows remote attackers to execute arbitrary SQL commands via the "Enter Reference Number Below" input, indicating improper input handling that enables SQL command conca...