452 matches found
SourceCodester Online Examination System Cross-Site Scripting Vulnerability (CNVD-2021-95922)
SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Online Examination System, which originates from the q parameter does not filter user input, which can be exploited to execute JavaScrip...
CVE-2020-29257
Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the q parameter to feedback.php...
Cross site scripting
Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the q parameter to feedback.php...
CVE-2020-29257
CVE-2020-29257: Cross-site scripting in Online Examination System 1.0 (SourceCodester Online Examination System) via the q parameter to feedback.php. Root cause: user input in q is not properly filtered, enabling injection of JavaScript that can execute in the victim’s browser. Documented impact:...
SourceCodester Online Examination System 跨站脚本漏洞
SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Online Examination System, which originates from the q parameter does not filter user input, which can be exploited to execute JavaScrip...
PT-2020-17126
Name of the Vulnerable Software and Affected Versions Online Examination System version 1.0 Description The issue is related to a cross-site scripting XSS vulnerability. It can be exploited via the q parameter to the "feedback.php" endpoint. Recommendations For Online Examination System version...
CVE-2020-29257: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the q parameter to feedback.php...
PT-2020-17132
Name of the Vulnerable Software and Affected Versions Online Doctor Appointment Booking System affected versions not specified Description An SQL injection issue was found in the Online Doctor Appointment Booking System, which uses PHP and MySQL. The vulnerability is exploitable via the q paramet...
CVE-2020-29283: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability was discovered in Online Doctor Appointment Booking System PHP and Mysql via the q parameter to getuser.php...
PT-2020-13837
Name of the Vulnerable Software and Affected Versions The Laborator Xenon theme version 1.3 Description The issue allows for Reflected XSS, which can be exploited via the data/typeahead-generate.php endpoint, specifically through the q also known as name parameter. Recommendations For version 1.3...
PT-2020-8516
Name of the Vulnerable Software and Affected Versions: yidashi yii2cmf version 2.0 Description: The issue is related to a Cross-Site Scripting XSS problem. It occurs via the "/search" API endpoint, specifically through the q parameter. This allows for potential malicious script injection...
CVE-2018-10704: Improper Neutralization of Input During Web Page Generation
yidashi yii2cmf 2.0 has XSS via the /search q parameter...
CVE-2019-20141: Improper Neutralization of Input During Web Page Generation
An XSS issue was discovered in the Laborator Neon theme 2.0 for WordPress via the data/autosuggest-remote.php q parameter...
CVE-2019-11427
The CVE-2019-11427 entry concerns an XSS vulnerability in idreamsoft iCMS 7.0.14, exploitable via the public/api.php?app=search&q parameter within the file app/search/search.app.php. Connected sources consistently describe the issue as a Cross-Site Scripting vulnerability in iCMS 7.0.14, with no ...
PT-2019-12306
Name of the Vulnerable Software and Affected Versions idreamsoft iCMS version 7.0.14 Description A cross-site scripting XSS issue was found in the app/search/search.app.php file of idreamsoft iCMS. The issue is related to the q parameter in the "public/api.php?app=search" API endpoint...
CVE-2019-11427: Improper Neutralization of Input During Web Page Generation
An XSS issue was discovered in app/search/search.app.php in idreamsoft iCMS 7.0.14 via the public/api.php?app=search q parameter...
CVE-2018-15566
tp5cms through 2017-05-25 has XSS via the admin.php/article/index.html q parameter...
CVE-2018-15566
tp5cms through 2017-05-25 has XSS via the admin.php/article/index.html q parameter...
PT-2018-13091
Name of the Vulnerable Software and Affected Versions tp5cms versions prior to 2017-05-25 Description The issue allows for XSS via the q parameter in the "admin.php/article/index.html" API endpoint. Recommendations For versions prior to 2017-05-25, avoid using the q parameter in the...