8 matches found
PT-2024-15374
Name of the Vulnerable Software and Affected Versions RRJ Nueva Ecija Engineer Online Portal version 1.0 Description A vulnerability was found in the RRJ Nueva Ecija Engineer Online Portal, affecting some unknown processing of the file add quiz.php of the component Quiz Handler. The manipulation ...
RRJ Nueva Ecija Engineer Online Portal Cross-Site Scripting Vulnerability
RRJ Nueva Ecija Engineer Online Portal is an online portal for engineers from RRJ Nueva Ecija. A cross-site scripting vulnerability exists in RRJ Nueva Ecija Engineer Online Portal version 1.0, which stems from the parameter Quiz Title/Quiz Description in the file addquiz.php that causes cross-si...
CVE-2021-42664
A Stored Cross Site Scripting XSS Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the 1 Quiz title and 2 quiz description parameters to addquiz.php. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which c...
CVE-2021-42664
A Stored Cross Site Scripting XSS Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the 1 Quiz title and 2 quiz description parameters to addquiz.php. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which c...
CVE-2021-42664
A Stored Cross Site Scripting XSS Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the 1 Quiz title and 2 quiz description parameters to addquiz.php. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which c...
Engineers Online Portal Cross-Site Script Vulnerabilities
Sourcecodester Engineers Online Portal is an open source online portal. sourcecodester Engineers Online Portal in PHP is vulnerable to a cross-site scripting vulnerability. An attacker can exploit the vulnerability to run javascript commands via the addquiz.php quiz title and quiz description...
CVE-2021-42664: Improper Neutralization of Input During Web Page Generation
A Stored Cross Site Scripting XSS Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the 1 Quiz title and 2 quiz description parameters to addquiz.php. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which c...
PT-2021-23645
Name of the Vulnerable Software and Affected Versions Sourcecodester Engineers Online Portal affected versions not specified Description A Stored Cross Site Scripting XSS issue exists in the Sourcecodester Engineers Online Portal in PHP. This is due to the quiz title and quiz description paramete...