CVE-2022-27352: Unrestricted Upload of File with Dangerous Type

Simple House Rental System v1 was discovered to contain an arbitrary file upload vulnerability via /app/register.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-25114

Event Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the fullname parameter under register.php...

Cross site scripting

Event Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the fullname parameter under register.php...

CVE-2022-25114

Event Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the fullname parameter under register.php...

CVE-2022-25114

The CVE-2022-25114 entry concerns Event Management v1.0, with a reflected XSS weakness in the full_name field of register.php. Affected software is Event Management (v1.0) as described in multiple sources; root cause is unsafe handling/echo of user-supplied input in the registration form, enablin...

CVE-2022-25114: Improper Neutralization of Input During Web Page Generation

Event Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the fullname parameter under register.php...

PT-2022-17082

Name of the Vulnerable Software and Affected Versions Event Management version v1.0 Description A reflected cross-site scripting XSS issue was found, which can be exploited via the full name parameter under the "register.php" endpoint. Recommendations For Event Management version v1.0, consider...

CVE-2021-44091

A Cross-Site Scripting XSS vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in register.php via the 1 fullname, 2 phone, and 3 address parameters...

CVE-2021-44091

A Cross-Site Scripting XSS vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in register.php via the 1 fullname, 2 phone, and 3 address parameters...

CVE-2021-44091

CVE-2021-44091 targets SourceCodester/ Courcecodester Multi Restaurant Table Reservation System 1.0. The XSS vulnerability occurs in register.php via the fullname, phone and address parameters, allowing injection of client-side code. Public documentation from multiple sources (CNVD/CNNVD, NVD/CVE...

CVE-2021-44091: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in register.php via the 1 fullname, 2 phone, and 3 address parameters...

PT-2022-11982

Name of the Vulnerable Software and Affected Versions Courcecodester Multi Restaurant Table Reservation System version 1.0 Description A Cross-Site Scripting XSS issue exists in the register.php file via the fullname, phone, and address parameters. This allows for potential malicious script...

Sql injection

USOC is an open source CMS with a focus on simplicity. In affected versions USOC allows for SQL injection via register.php. In particular usernames, email addresses, and passwords provided by the user were not sanitized and were used directly to construct a sql statement. Users are advised to...

CVE-2022-21643

CVE-2022-21643 concerns USOC, an open-source CMS. The vulnerability is a SQL injection in register.php triggered by unsanitized user inputs (username, email, password) used to construct SQL statements. Affected versions are susceptible; upgrade is advised and there are no documented workarounds i...

CVE-2022-21643

USOC is an open source CMS with a focus on simplicity. In affected versions USOC allows for SQL injection via register.php. In particular usernames, email addresses, and passwords provided by the user were not sanitized and were used directly to construct a sql statement. Users are advised to...

CVE-2022-21643 SQL Injection in USOC

USOC is an open source CMS with a focus on simplicity. In affected versions USOC allows for SQL injection via register.php. In particular usernames, email addresses, and passwords provided by the user were not sanitized and were used directly to construct a sql statement. Users are advised to...

CVE-2022-21643 SQL Injection in USOC

USOC is an open source CMS with a focus on simplicity. In affected versions USOC allows for SQL injection via register.php. In particular usernames, email addresses, and passwords provided by the user were not sanitized and were used directly to construct a sql statement. Users are advised to...

CVE-2022-21643 SQL Injection in USOC

USOC is an open source CMS with a focus on simplicity. In affected versions USOC allows for SQL injection via register.php. In particular usernames, email addresses, and passwords provided by the user were not sanitized and were used directly to construct a sql statement. Users are advised to...

PT-2022-14999

Name of the Vulnerable Software and Affected Versions USOC affected versions not specified Description The issue allows for SQL injection via the register.php file. Specifically, usernames, email addresses, and passwords provided by the user were not sanitized and were used directly to construct ...

CVE-2022-21643: Improper Neutralization of Special Elements used in an SQL Command

USOC is an open source CMS with a focus on simplicity. In affected versions USOC allows for SQL injection via register.php. In particular usernames, email addresses, and passwords provided by the user were not sanitized and were used directly to construct a sql statement. Users are advised to...