PT-2024-15214 · WordPress · Product Enquiry For Woocommerce

Name of the Vulnerable Software and Affected Versions: The Product Enquiry for WooCommerce WordPress plugin versions prior to 3.2 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the page parameter is not properly sanitised and escaped before being...

CVE-2023-7151: Improper Neutralization of Input During Web Page Generation

The Product Enquiry for WooCommerce WordPress plugin before 3.2 does not sanitise and escape the page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

PT-2024-15616 · Sourcecodester · Sourcecodester Best House Rental Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester House Rental Management System version 1.0 Description: A problematic issue has been found in the processing of the file index.php, where the manipulation of the page argument leads to cross site scripting. The attack can be...

Clinic Queuing System Security Vulnerability

Clinic Queuing System is a clinic queuing system by the individual developer Carlo Montero. A security vulnerability exists in Clinic Queuing System version 1.0, which stems from the index.php in the component GET Parameter Handler, which contains some unknown processing that leads to file...

PT-2024-15425 · Sourcecodester · Sourcecodester Clinic Queuing System

Name of the Vulnerable Software and Affected Versions: SourceCodester Clinic Queuing System version 1.0 Description: A critical issue affects the processing of the file /index.php, specifically the component GET Parameter Handler. The manipulation of the page argument leads to file inclusion. Thi...

PT-2023-32895 · Unknown · Sourcecodester Medicine Tracker System

Name of the Vulnerable Software and Affected Versions: SourceCodester Medicine Tracking System version 1.0 Description: A critical issue affects some unknown processing in the system. The manipulation of the page argument leads to path traversal, specifically '../filedir'. This can be initiated...

PT-2023-32859 · Sourcecodester · Sourcecodester Simple Student Attendance System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Student Attendance System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality. The manipulation of the page argument leads to path traversal, allowing access to...

PT-2023-31253

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description A local file inclusion issue allows attackers to include internal PHP files and gain unauthorized access by manipulating the page parameter at the "/customer support/index.php" API endpoint...

CVE-2023-6618

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The exploit has been disclosed to...

PT-2023-32718 · Sourcecodester · Sourcecodester Simple Student Attendance System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Student Attendance System version 1.0 Description: A vulnerability was found in the processing of the file index.php, where the manipulation of the page argument leads to cross-site scripting. The attack may be initiated...

PT-2023-32720 · Unknown · Sourcecodester Simple Student Attendance System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Student Attendance System version 1.0 Description: A vulnerability was found in the SourceCodester Simple Student Attendance System, affecting an unknown functionality of the file index.php. The manipulation of the page...

PT-2023-32717 · Typecho · Typecho

Name of the Vulnerable Software and Affected Versions: Typecho version 1.2.1 Description: A problematic issue has been found in Typecho, affecting some unknown functionality of the file /admin/manage-users.php. The manipulation of the page argument leads to information disclosure. The issue has...

CVE-2023-46974

Cross Site Scripting vulnerability in Best Courier Management System v.1.000 allows a remote attacker to execute arbitrary code via a crafted payload to the page parameter in the URL...

Cross site scripting

Cross Site Scripting vulnerability in Best Courier Management System v.1.000 allows a remote attacker to execute arbitrary code via a crafted payload to the page parameter in the URL...

CVE-2023-48206

A Cross Site Scripting XSS vulnerability in GaatiTrack Courier Management System 1.0 allows a remote attacker to inject JavaScript via the page parameter to login.php or header.php...

CVE-2023-48172

A Cross Site Scripting XSS vulnerability in Shuttle Booking Software 2.0 allows a remote attacker to inject JavaScript via the name, description, title, or address parameter to index.php...

Best Courier Management System 跨站脚本漏洞

Best Courier Management System is a courier management system. A cross-site scripting vulnerability exists in Best Courier Management System v.1.0, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by a remote attacker to execu...

CVE-2023-46974: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Best Courier Management System v.1.000 allows a remote attacker to execute arbitrary code via a crafted payload to the page parameter in the URL...

PT-2023-30731 · Unknown · Gaatitrack Courier Management System

Name of the Vulnerable Software and Affected Versions: GaatiTrack Courier Management System version 1.0 Description: A Cross Site Scripting XSS issue allows a remote attacker to inject JavaScript via the page parameter to "login.php" or "header.php". This could potentially lead to unauthorized...

CVE-2023-6411

A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via home.php in the update parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all...