CVE-2020-20797

FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php...

CVE-2020-20797

FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php...

PT-2021-10544

Name of the Vulnerable Software and Affected Versions: FlameCMS version 3.3.5 Description: The issue is a time-based blind SQL injection vulnerability. It is located in the /account/register.php endpoint. Recommendations: For FlameCMS version 3.3.5, consider disabling the /account/register.php...

CVE-2020-20797: Improper Neutralization of Special Elements used in an SQL Command

FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php...

Cross-site Scripting (XSS) - Reflected in kasuganosoras/pigeon

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

PT-2021-21247

Name of the Vulnerable Software and Affected Versions Care2x Hospital Information Management version 2.7 Alpha Description A stored cross-site scripting XSS issue has been identified. The vulnerability is found in POST requests to the "/modules/registration admission/patient register.php" page,...

CVE-2021-31329

Cross Site Scripting XSS in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php...

Cross site scripting

Cross Site Scripting XSS in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php...

CVE-2021-31329

Cross Site Scripting XSS in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php...

RemoteClinic 2 Cross Site Scripting

Exploit Title: Cross Site Scripting XSS RemoteClinic on register.php Author: nu11secur1ty Debug: g3ck0dr1v3r Date: 04.21.2021 Vendor: RemoteClinic Link: https://github.com/remoteclinic/RemoteClinic CVE: CVE-2021-30044 + Exploit Source:...

PT-2021-19244

Name of the Vulnerable Software and Affected Versions Remote Clinic version 2.0 Description The issue concerns a Cross Site Scripting XSS problem. It affects the "Chat" and "Personal Address" fields on the staff/register.php page. Recommendations For Remote Clinic version 2.0, consider restrictin...

CVE-2021-31329: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php...

Cross site scripting

Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...

Cross site scripting

Cross Site Scripting XSS in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Contact" field on clinics/register.php...

CVE-2021-30044

CVE-2021-30044 is a Cross-Site Scripting (XSS) vulnerability in Remote Clinic v2.0 exploitable via the First Name or Last Name field on staff/register.php. The connected sources confirm the affected product and entry details, including public exploit references and multiple security databases des...

CVE-2021-30044

Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...

CVE-2021-30042

CVE-2021-30042 describes a stored XSS vulnerability in Remote Clinic v2.0 exploitable via the Clinic Name/Address/City/Contact fields on clinics/register.php. Multiple sources (NVD, Red Hat, CNVD, CVE List) confirm the issue and its impact to inject scripts. Public details do not provide a patche...

CVE-2021-30042

Cross Site Scripting XSS in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Contact" field on clinics/register.php...

CVE-2021-30042

Cross Site Scripting XSS in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Contact" field on clinics/register.php...

PT-2021-11588 · Monitorr · Monitorr

Name of the Vulnerable Software and Affected Versions: Monitorr version 1.7.6m Description: An authorization bypass issue in Monitorr/assets/config/ installation/ register.php allows an unauthorized person to create valid credentials. Recommendations: For Monitorr version 1.7.6m, consider...