Cross site scripting

Online Marriage Registration System 1.0 is affected by stored cross-site scripting XSS vulnerabilities in multiple parameters...

CVE-2020-26052

CVE-2020-26052 affects Online Marriage Registration System 1.0 with stored cross-site scripting (XSS) vulnerabilities in multiple parameters. The NVD entry lists both CVSSv2 (3.5, LOW) and CVSSv3.1 (5.4, MEDIUM) scores. PT-2021-11211 describes stored XSS in multiple parameters and notes a lack of...

CVE-2020-26052

Online Marriage Registration System 1.0 is affected by stored cross-site scripting XSS vulnerabilities in multiple parameters...

Phpgurukul Online Marriage Registration System Cross-Site Scripting Vulnerability

Phpgurukul Online Marriage Registration System is a website builder from the Phpgurukul team that supports online marriage registration. A cross-site scripting vulnerability exists in Phpgurukul Online Marriage Registration System, which stems from a lack of proper validation of client-side data ...

PT-2021-11211 · Unknown · The Online Marriage Registration System

Name of the Vulnerable Software and Affected Versions: Online Marriage Registration System version 1.0 Description: The issue is related to stored cross-site scripting XSS vulnerabilities in multiple parameters. This means that an attacker can inject malicious scripts into the system, which are...

Unauthorized Access Vulnerability in Waychar Enrollment System

Waychar Registration System is an online registration system developed for sporting events and other general purpose activities. An unauthorized access vulnerability exists in the Waychar registration system, which can be exploited by attackers to obtain sensitive information...

CVE-2021-1354

A vulnerability in the certificate registration process of Cisco Unified Computing System UCS Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager UCSM. This vulnerability is due to improper certificate validation. An attacker...

Input validation

A vulnerability in the certificate registration process of Cisco Unified Computing System UCS Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager UCSM. This vulnerability is due to improper certificate validation. An attacker...

CVE-2021-1354 Cisco Unified Computing System Central Software Improper Certificate Validation Vulnerability

A vulnerability in the certificate registration process of Cisco Unified Computing System UCS Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager UCSM. This vulnerability is due to improper certificate validation. An attacker...

What tracking an attacker email infrastructure tells us about persistent cybercriminal operations

From March to December 2020, we tracked segments of a dynamically generated email infrastructure that attackers used to send more than a million emails per month, distributing at least seven distinct malware families in dozens of campaigns using a variety of phishing lures and tactics. These...

What tracking an attacker email infrastructure tells us about persistent cybercriminal operations

From March to December 2020, we tracked segments of a dynamically generated email infrastructure that attackers used to send more than a million emails per month, distributing at least seven distinct malware families in dozens of campaigns using a variety of phishing lures and tactics. These...

OpenMage: Very long names on demo.openmage.org could redirect victim users to malicious url redirects via email contacts.

Summary: We found that the maximum length of the first and last name fields was not set to 32 characters at registration and to 1000 characters when using the profile update form. The attacker can use this method as a malware attack, the user will redirect to a website that contains malware or...

Wclimb Koa2-blog SQL Injection Vulnerability

Wclimb Koa2-blog is a Node, Mysql based blog builder system by the individual developer of Wclimb. Sql injection vulnerability in koa2-blog 1.0.0 exists, which can be exploited by remote attackers to inject malicious Sql statements into the registration page via the name parameter...

Egavilanmedia User Registration & Login System SQL Injection Vulnerability (CNVD-2021-08881)

Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A SQL injection vulnerability exists in EgavilanMedia User Registration & Login System 1.0, which can be exploited by an attacker to execute SQL statements due to the...

The vulnerability of the admin/executar_login.php component of the Mk-Auth authentication software allows a hacker to escalate their privileges.

The vulnerability of the admin/executarlogin.php component in the Mk-Auth authentication software is related to errors in managing registration data. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

DRUPAL-CONTRIB-2021-001

The optional Social Auth Extra module enables you to use the single sign-on methods provided by Open Social e.g. Facebook, LinkedIn, Google and Twitter. The module doesn't implement a proper cache strategy for anonymous users allowing the registration form to be cached with disclosed information ...

CVE-2020-23359

WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check...

CVE-2020-23360

oscommerce v2.3.4.1 has a functional problem in user registration and password rechecking, where a non-identical password can bypass the checks in /catalog/admin/administrators.php and /catalog/passwordreset.php...

CVE-2020-23360

oscommerce v2.3.4.1 has a functional problem in user registration and password rechecking, where a non-identical password can bypass the checks in /catalog/admin/administrators.php and /catalog/passwordreset.php...

CVE-2020-23359

WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check...