7892 matches found
Cross site scripting
Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the firstname and lastname parameters of the registration form & login pages...
CVE-2022-43097
Phpgurukul User Registration & User Management System v3.0 is affected by multiple stored XSS vulnerabilities in the registration and login forms. The XSS can be triggered via the firstname and lastname parameters. Affected component is the user input handling for registration/login; root cause d...
CVE-2022-43097
Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the firstname and lastname parameters of the registration form & login pages...
CVE-2022-43097
Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the firstname and lastname parameters of the registration form & login pages...
User Management System 跨站脚本漏洞
User Management System is a Php User Management System using Stored Procedures by Anuj Kumar Personal Developer. A security vulnerability exists in Phpgurukul User Registration & User Management System version v3.0, which can be exploited by an attacker to conduct a cross-site scripting attack vi...
CVE-2022-43097: Improper Neutralization of Input During Web Page Generation
Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripting XSS vulnerabilities via the firstname and lastname parameters of the registration form & login pages...
PT-2022-26750 · Unknown · Phpgurukul User Registration & Login/User Management System
Name of the Vulnerable Software and Affected Versions: Phpgurukul User Registration & User Management System version 3.0 Description: The issue concerns multiple stored cross-site scripting XSS vulnerabilities. These vulnerabilities can be exploited via the firstname and lastname parameters of th...
CVE-2022-38813
PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete the users, add and manage Blood Group, and Submit Report...
Design/Logic Flaw
PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete the users, add and manage Blood Group, and Submit Report...
CVE-2022-38813
PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete the users, add and manage Blood Group, and Submit Report...
CVE-2022-38813
PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete the users, add and manage Blood Group, and Submit Report...
CVE-2022-38813: Exposure of Resource to Wrong Sphere
PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete the users, add and manage Blood Group, and Submit Report...
CVE-2022-38813
CVE-2022-38813 affects PHPGurukul Blood Donor Management System 1.0. The issue is an improper access control that lets an authenticated user switch from a user dashboard to the admin dashboard by altering parameters in the URL (e.g., changing /user/dashboard to /admin/dashboard), enabling access ...
PT-2022-24580
Name of the Vulnerable Software and Affected Versions PHPGurukul Blood Donor Management System version 1.0 Description The issue allows attackers to access all user data, delete users, add and manage Blood Group, and submit reports due to improper access restrictions to the "admin/dashboard.php"...
Phpgurukul Teacher Record Management System Cross-Site Scripting Vulnerability
Phpgurukul Teachers Record Management System version 1.0 contains a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data on the Add Subject page, which could be exploited by a highly privileged attacker such as an administrator to...
PHPGurukul Blood Donor Management System Cross-Site Scripting Vulnerability
The PHPGurukul Blood Donor Management System is a blood donor management system from PHPGurukul, USA. A cross-site scripting vulnerability exists in version 1.0 of the Phpgurukul Blood Donor Management System, which stems from a lack of effective filtering and escaping of user-supplied data at Ad...
CVE-2022-40470
Phpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature...
CVE-2022-40470
Phpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature...