Cross site scripting

A vulnerability was found in SourceCodester Performance Indicator System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/addproduct.php. The manipulation of the argument prodname leads to cross site scripting. The attack can ...

CVE-2023-3183

CVE-2023-3183 affects SourceCodester Performance Indicator System 1.0 and stems from an input handling flaw in the /admin/addproduct.php file: modifying the prodname parameter enables cross-site scripting. The issue is exploitable remotely, with the exploit disclosed publicly. Multiple connected ...

CVE-2023-3183 SourceCodester Performance Indicator System addproduct.php cross site scripting

A vulnerability was found in SourceCodester Performance Indicator System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/addproduct.php. The manipulation of the argument prodname leads to cross site scripting. The attack can ...

Performance Indicator System 跨站脚本漏洞

Performance Indicator System is a performance indicator system management system for nurhodelta17 individual developers. A cross-site scripting vulnerability exists in Performance Indicator System version 1.0, which stems from a problem in the file /admin/addproduct.php, where incorrect...

CVE-2023-3183: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Performance Indicator System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/addproduct.php. The manipulation of the argument prodname leads to cross site scripting. The attack can ...

CVE-2022-28740: Undefined Security Weakness

aEnrich eHRD Learning Management Key Performance Indicator System 5+ exposes Sensitive Information to an Unauthorized Actor...

CVE-2022-28742: Undefined Security Weakness

aEnrich eHRD Learning Management Key Performance Indicator System 5+ has Improper Access Control. The web application does not validate user session when accessing many application pages. This can allow an attacker to gain unauthenticated access to sensitive functionalities in the application...

CVE-2022-28741: Improper Limitation of a Pathname to a Restricted Directory

aEnrich a+HRD 5.x Learning Management Key Performance Indicator System has a local file inclusion LFI vulnerability that occurs due to missing input validation in v5.x...