Lucene search
+L

6443 matches found

CNVD
CNVD
added 2025/11/18 12:00 a.m.12 views

Student Information System register.php Cross-Site Scripting Vulnerability

Student Information System is a student information system. The Student Information System suffers from a cross-site scripting vulnerability that stems from the mishandling of user input by an unspecified functional component in the /register.php file. An attacker can exploit this vulnerability b...

6.1CVSS4.4AI score0.00359EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:00 a.m.6 views

Siemens SCALANCE and RUGGEDCOM Devices Improper Initialization (CVE-2024-50193)

x86/entry32: Clear CPU buffers after register restore in NMI return CPU buffers are currently cleared after call to excnmi, but before register state is restored. This may be okay for MDS mitigation but not for RDFS. Because RDFS mitigation requires CPU buffers to be cleared when registers don't...

7.1CVSS7.2AI score0.00215EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/11/18 12:00 a.m.13 views

EUVD-2025-198044

A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs such as LSTAR as an unprivileged user. This is due to the implementation of an insecure version of WinRing0 1.2.0.5, renamed to IntelliBreeze.Maintenance.Service.sys that lac...

7.3CVSS6.2AI score0.00263EPSS
SaveExploits1References3
CNVD
CNVD
added 2025/11/18 12:00 a.m.9 views

Student Information System register.php File SQL Injection Vulnerability

Student Information System is a student information system. Student Information System is vulnerable to a SQL injection vulnerability that originates from improper handling of user input in the /register.php file. No details of the vulnerability are available at this time...

9.8CVSS7.6AI score0.00435EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/11/18 12:00 a.m.13 views

Student Record System register.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of external input SQL statements for multiple parameters in register.php. An attacker can exploit this vulnerability to execute illegal SQL...

6.5CVSS8.3AI score0.0024EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/11/17 7:06 p.m.6 views

EUVD-2025-197874

Flowise has Authentication Bypass Using Unprotected Registration Endpoint /register...

6.5AI score
SaveExploits0References2
OSV
OSV
added 2025/11/17 7:06 p.m.12 views

GHSA-V5W9-PRXF-W882 Flowise has Authentication Bypass Using Unprotected Registration Endpoint (/register)

Summary An unauthenticated attacker can exploit the unprotected registration endpoint /register to create a new user and bypass authentication. Details Critical vulnerability in Flowise 3.0.1 on-premise deployment allows unauthenticated attackers to exploit the /api/v1/account/register endpoint t...

8.7CVSS7.3AI score0.00675EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/11/17 6:30 p.m.8 views

EUVD-2024-55093

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail, username, userfirstname, userlastname, and useraddress parameters in userregister.php...

6.5CVSS7.5AI score0.0024EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/11/17 9:07 a.m.23 views

CVE-2025-13244

A vulnerability was determined in code-projects Student Information System 2.0. The affected element is an unknown function of the file /register.php. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

6.1CVSS5.7AI score0.00359EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/17 8:03 a.m.11 views

CVE-2025-13242

A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be...

9.8CVSS6.9AI score0.00435EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/11/17 12:00 a.m.9 views

Kashipara Online Furniture Shopping Ecommerce Website 安全漏洞

Kashipara Online Furniture Shopping Ecommerce Website is a fast online shopping ecommerce website from Kashipara. A security vulnerability exists in Kashipara Online Furniture Shopping Ecommerce Website version 1.0, which is caused by a vulnerability in userregister.php in the useremail, username...

6.5CVSS7.7AI score0.0024EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/11/17 12:00 a.m.5 views

CVE-2024-44652

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail, username, userfirstname, userlastname, and useraddress parameters in userregister.php...

7.6AI score0.0024EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/11/17 12:00 a.m.11 views

PT-2025-47169

Name of the Vulnerable Software and Affected Versions Kashipara Ecommerce Website version 1.0 Description The Kashipara Ecommerce Website is susceptible to SQL Injection. The issue affects the user register.php file and involves the user email, username, user firstname, user lastname, and user...

6.5CVSS7.1AI score0.0024EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/11/16 9:30 a.m.9 views

EUVD-2025-197721

A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be...

7.5CVSS7.1AI score0.00435EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/11/16 9:30 a.m.18 views

EUVD-2025-197724

A vulnerability was determined in code-projects Student Information System 2.0. The affected element is an unknown function of the file /register.php. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

5.3CVSS3.9AI score0.00359EPSS
SaveExploits1References6
NVD
NVD
added 2025/11/16 9:15 a.m.17 views

CVE-2025-13244

A vulnerability was determined in code-projects Student Information System 2.0. The affected element is an unknown function of the file /register.php. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

6.1CVSS0.00359EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/16 8:32 a.m.4 views

CVE-2025-13244 code-projects Student Information System register.php cross site scripting

A vulnerability was determined in code-projects Student Information System 2.0. The affected element is an unknown function of the file /register.php. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

5.3CVSS5.4AI score0.00359EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/11/16 8:32 a.m.23 views

CVE-2025-13244 code-projects Student Information System register.php cross site scripting

A vulnerability was determined in code-projects Student Information System 2.0. The affected element is an unknown function of the file /register.php. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

5.3CVSS0.00359EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/16 8:32 a.m.28 views

CVE-2025-13244

The CVE-2025-13244 entry concerns code-projects Student Information System 2.0. The vulnerability is a cross-site scripting flaw in the /register.php file, affecting an unspecified function; the issue enables remote exploitation and has publicly disclosed exploit information. Multiple connected s...

6.1CVSS4.1AI score0.00359EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2025/11/16 8:15 a.m.10 views

CVE-2025-13242

A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be...

9.8CVSS0.00435EPSS
SaveExploits1References5
Rows per page
Query Builder