PT-2021-18582

Name of the Vulnerable Software and Affected Versions Remote Clinic version 2.0 Description The issue is related to Cross Site Scripting XSS that can be exploited via the First Name or Last Name field on the "staff/register.php" API endpoint. This allows for potential malicious script injection...

PT-2021-18581

Name of the Vulnerable Software and Affected Versions Remote Clinic version 2.0 Description The issue is related to Cross Site Scripting XSS that can be exploited via the Clinic Name, Clinic Address, Clinic City, or Clinic Contact field on the "clinics/register.php" API endpoint. This allows for...

CVE-2021-30044: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...

CVE-2021-30042: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Contact" field on clinics/register.php...

CVE-2021-28007

Web Based Quiz System 1.0 is affected by cross-site scripting XSS in register.php through the name parameter...

CVE-2021-28007

Web Based Quiz System 1.0 is affected by cross-site scripting XSS in register.php through the name parameter...

Cross site scripting

Web Based Quiz System 1.0 is affected by cross-site scripting XSS in register.php through the name parameter...

CVE-2021-28007

Web Based Quiz System 1.0 is affected by cross-site scripting XSS in register.php through the name parameter...

CVE-2021-28007

Web Based Quiz System 1.0 is affected by cross-site scripting XSS in register.php through the name parameter...

CVE-2021-28007

CVE-2021-28007 affects Web Based Quiz System 1.0 and is a reflected/stored cross-site scripting (XSS) vulnerability in register.php via the name parameter. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE listing, CNNVD) with consistent description: XSS in the register.p...

PT-2021-17710

Name of the Vulnerable Software and Affected Versions: Web Based Quiz System version 1.0 Description: The issue is related to cross-site scripting XSS in the register.php file through the name parameter. This allows for potential malicious script injection. Recommendations: For Web Based Quiz...

CVE-2021-28007: Improper Neutralization of Input During Web Page Generation

Web Based Quiz System 1.0 is affected by cross-site scripting XSS in register.php through the name parameter...

CVE-2020-15599

Victor CMS through 2019-02-28 allows XSS via the register.php userfirstname or userlastname field...

Cross site scripting

Victor CMS through 2019-02-28 allows XSS via the register.php userfirstname or userlastname field...

CVE-2020-15599

Victor CMS through 2019-02-28 allows XSS via the register.php userfirstname or userlastname field...

CVE-2020-15599

Victor CMS (pre-2019-02-28) is affected by CVE-2020-15599 due to stored XSS in the register.php form fields user_firstname and user_lastname. The vulnerability arises from insufficient input validation on client-side data, enabling execution of injected scripts in user browsers. A publicly docume...

PT-2020-14523

Name of the Vulnerable Software and Affected Versions Victor CMS through 2019-02-28 Description The issue allows for XSS attacks via the register.php user firstname or user lastname field. Recommendations For Victor CMS through 2019-02-28, consider disabling the register.php page or restricting...

CVE-2020-15599: Improper Neutralization of Input During Web Page Generation

Victor CMS through 2019-02-28 allows XSS via the register.php userfirstname or userlastname field...

CVE-2020-10106

CVE-2020-10106 affects PHPGurukul Daily Expense Tracker System 1.0. The Red Hat/NVD entries confirm a SQL injection via the email parameter in index.php or register.php, enabling dumping of the MySQL database and bypassing the login prompt. The vulnerability is driven by improper handling of user...

PT-2020-11930

Name of the Vulnerable Software and Affected Versions PHPGurukul Daily Expense Tracker System version 1.0 Description The issue allows for SQL injection, as demonstrated by the email parameter in "index.php" or "register.php", enabling the dumping of the MySQL database and bypassing the login...