Lucene search
+L

934 matches found

Cvelist
Cvelist
•added 2024/01/22 4:31 p.m.•57 views

CVE-2024-0782 CodeAstro Online Railway Reservation System pass-profile.php cross site scripting

A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic. This vulnerability affects unknown code of the file pass-profile.php. The manipulation of the argument First Name/Last Name/User Name leads to cross site scripting. The attack can be...

4CVSS6.3AI score0.00571EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/22 12:00 a.m.•1 views

CVE-2024-0782: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic. This vulnerability affects unknown code of the file pass-profile.php. The manipulation of the argument First Name/Last Name/User Name leads to cross site scripting. The attack can be...

6.1CVSS3.7AI score0.00571EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/12/22 2:31 a.m.•50 views

CVE-2023-7055 PHPGurukul Online Notes Sharing System Contact Information profile.php access control

A vulnerability classified as problematic has been found in PHPGurukul Online Notes Sharing System 1.0. Affected is an unknown function of the file /user/profile.php of the component Contact Information Handler. The manipulation of the argument mobilenumber leads to improper access controls. It i...

4.3CVSS5.9AI score0.00466EPSS
SaveExploits1References3
OSV
OSV
•added 2023/12/22 1:15 a.m.•12 views

CVE-2023-7052

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been classified as problematic. This affects an unknown part of the file /user/profile.php. The manipulation of the argument name leads to cross-site request forgery. It is possible to initiate the attack remotely. Th...

4.3CVSS4.7AI score0.00368EPSS
SaveExploits1References3
Prion
Prion
•added 2023/12/22 1:15 a.m.•33 views

Cross site request forgery (csrf)

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been classified as problematic. This affects an unknown part of the file /user/profile.php. The manipulation of the argument name leads to cross-site request forgery. It is possible to initiate the attack remotely. Th...

5CVSS7AI score0.00368EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/12/22 1:00 a.m.•23 views

CVE-2023-7052 PHPGurukul Online Notes Sharing System profile.php cross-site request forgery

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been classified as problematic. This affects an unknown part of the file /user/profile.php. The manipulation of the argument name leads to cross-site request forgery. It is possible to initiate the attack remotely. Th...

5CVSS6.8AI score0.00368EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/12/22 1:00 a.m.•56 views

CVE-2023-7052 PHPGurukul Online Notes Sharing System profile.php cross-site request forgery

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been classified as problematic. This affects an unknown part of the file /user/profile.php. The manipulation of the argument name leads to cross-site request forgery. It is possible to initiate the attack remotely. Th...

5CVSS5AI score0.00368EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/22 12:00 a.m.•4 views

CVE-2023-7052: Cross-Site Request Forgery (CSRF)

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been classified as problematic. This affects an unknown part of the file /user/profile.php. The manipulation of the argument name leads to cross-site request forgery. It is possible to initiate the attack remotely. Th...

5CVSS5AI score0.00368EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/21 12:00 a.m.•4 views

CVE-2023-7050: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in PHPGurukul Online Notes Sharing System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file user/profile.php. The manipulation of the argument name/email leads to cross site scripting. The attack can be launche...

5.4CVSS3.6AI score0.00497EPSS
SaveExploits1References3
CNVD
CNVD
•added 2023/11/16 12:00 a.m.•17 views

Teacher Subject Allocation Management System profile.php file cross-site scripting vulnerability

Teacher Subject Allocation Management System a teacher subject allocation management system. Teacher Subject Allocation Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the adminname and email...

4.8CVSS6.3AI score0.00423EPSS
SaveExploits1References1
NVD
NVD
•added 2023/11/15 6:15 a.m.•22 views

CVE-2023-47446

Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...

5.4CVSS0.00419EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/15 12:00 a.m.•4 views

CVE-2023-47446: Improper Neutralization of Input During Web Page Generation

Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...

5.4CVSS6AI score0.00419EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/11/15 12:00 a.m.•34 views

CVE-2023-47446

Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...

5.5AI score0.00419EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2023/11/15 12:00 a.m.•14 views

CVE-2023-47446

Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...

6.1AI score0.00419EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/11/15 12:00 a.m.•11 views

PHPGurukul Pre-School Enrollment Cross-Site Scripting Vulnerability

PHPGurukul Pre-School Enrollment is a web-based preschool enrollment system from PHPGurukul, Inc. A cross-site scripting vulnerability exists in version 1.0 of PHPGurukul Pre-School Enrollment, which originates from an easy cross-site scripting attack via the fullname parameter in the profile.php...

5.4CVSS6.2AI score0.00419EPSS
SaveExploits1References2
NVD
NVD
•added 2023/11/14 10:15 p.m.•26 views

CVE-2023-46026

Cross Site Scripting XSS vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters...

4.8CVSS0.00423EPSS
SaveExploits1References1
Prion
Prion
•added 2023/11/14 10:15 p.m.•22 views

Cross site scripting

Cross Site Scripting XSS vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters...

4.3CVSS6.5AI score0.00423EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•2 views

CVE-2023-46026: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters...

4.8CVSS5.9AI score0.00423EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/11/14 12:00 a.m.•17 views

phpgurukul Teacher Subject Allocation Management System 安全漏洞

Teacher Subject Allocation Management System a teacher subject allocation management system. Teacher Subject Allocation Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the adminname and email...

4.8CVSS6.2AI score0.00423EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/07 12:00 a.m.•2 views

CVE-2023-33480: Unrestricted Upload of File with Dangerous Type

RemoteClinic 2.0 contains a critical vulnerability chain that can be exploited by a remote attacker with low-privileged user credentials to create admin users, escalate privileges, and execute arbitrary code on the target system via a PHP shell. The vulnerabilities are caused by a lack of input...

8.8CVSS8.2AI score0.0193EPSS
SaveExploits1References3
Rows per page
Query Builder