Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. Affected is an unknown function of the file /process/assignp.php of the component Project Assignment Report. The manipulation of the argument pname leads to cross site scripting. It i...

SourceCodester Employee Management System Cross-Site Scripting Vulnerability

SourceCodester Employee Management System is a php-based employee performance management system from SourceCodester, Inc. A cross-site scripting vulnerability exists in the SourceCodester Employee Management System version 1.0, which stems from a cross-site scripting vulnerability due to incorrec...

CVE-2024-1871: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. Affected is an unknown function of the file /process/assignp.php of the component Project Assignment Report. The manipulation of the argument pname leads to cross site scripting. It i...

CVE-2023-46580

Cross-Site Scripting XSS vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of the editProduct.php component...

CVE-2023-46580

Cross-Site Scripting XSS vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of the editProduct.php component...

Inventory Management System Cross-Site Scripting Vulnerability

Inventory Management System is an inventory management system by the individual developer of stemword. A cross-site scripting vulnerability exists in Inventory Management System version V1.0 that could allow an attacker to execute arbitrary code via the pname parameter of the editProduct.php...

PT-2023-30098

Name of the Vulnerable Software and Affected Versions Inventory Management version V1.0 Description A Cross-Site Scripting XSS issue allows attackers to execute arbitrary code via the pname parameter of the "editProduct.php" component. Recommendations For Inventory Management version V1.0, consid...

CVE-2023-46580: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of the editProduct.php component...

CVE-2022-35421

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php...

CVE-2022-35421

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php...

Sql injection

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php...

CVE-2022-35421

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php...

Online Tours And Travels Management System SQL注入漏洞

Online Tours And Travels Management System is an online travel management system by Carlo Montero, an individual developer. A security vulnerability exists in Online Tours And Travels Management System v1.0, which can be exploited by an attacker to perform SQL injection using the pname parameter ...

CVE-2022-35421: Improper Neutralization of Special Elements used in an SQL Command

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php...

mallbuilder foreground arbitrary file deletion vulnerability

MallBuilder is a multi-user online shopping mall solution based on PHP + MYSQL. An arbitrary file deletion vulnerability exists in the frontend of mallbuilder. Due to lib/smarty/movepic.php in the $GET'pname' external incoming parameters are not filtered, as a controllable parameter, when type =...