1228 matches found
CVE-2024-48807
Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...
CVE-2024-48807
CVE-2024-48807 is a Cross-Site Scripting (XSS) vulnerability in PHPGurukul Doctor Appointment Management System v1.0. The flaw allows a local attacker to execute arbitrary code via the search parameter. See CVE description: XSS in PHPGurukul’s Doctor Appointment Management System, enabling code e...
CVE-2024-48807
Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...
CVE-2024-48283
Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in /admin//search-result.php via the searchkey parameter...
CVE-2024-48283
Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in /admin//search-result.php via the searchkey parameter. Affects component: admin search results handler; root cause: SQLi in the search-key processing. CVSS 3.1 base score 9.8 (CRITICAL) with netw...
Exploit for CVE-2024-55270
Student Management System 1.0 CVE-2024-55270 Overview T...
CVE-2024-8468
SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the information stored in it...
PT-2024-39035 · Unknown · Job Portal
Name of the Vulnerable Software and Affected Versions: Job Portal affected versions not specified Description: A SQL injection vulnerability allows an attacker to send a specially designed query through the search parameter in "/jobportal/index.php" and retrieve all the information stored in it...
PHPGurukul Job Portal SQL注入漏洞
PHPGurukul Job Portal is a PHP-based job search website system from PHPGurukul. A SQL injection vulnerability exists in PHPGurukul Job Portal version 1.0, which originates from the search parameter in /jobportal/index.php...
CVE-2024-43775
SQL Injection in search course titles function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the search parameter...
CVE-2024-43775 Huachu Easytest Online Learning Test Platform - SQL Injection
SQL Injection in search course titles function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the search parameter...
PT-2024-30647 · Unknown · Easytest Online Test Platform
Name of the Vulnerable Software and Affected Versions: Easytest Online Test Platform versions 24E01 and earlier Description: The issue allows remote authenticated users to execute arbitrary SQL commands via the search parameter in the search course titles function. This enables attackers to run...
CVE-2024-42782
A SQL injection vulnerability in "/music/ajax.php?action=findmusic" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "search" parameter...
PT-2024-30154 · Unknown · Kashipara Music Management System
Name of the Vulnerable Software and Affected Versions: Kashipara Music Management System version 1.0 Description: A SQL injection issue in the "/music/ajax.php?action=find music" endpoint allows an attacker to execute arbitrary SQL commands via the search parameter. This enables the attacker to...
CVE-2024-40484
CVE-2024-40484 affects PHPGurukul Old Age Home Management System v1.0, with a Reflected XSS in the /oahms/search.php endpoint via the searchdata parameter. The vulnerability allows remote attackers to inject and potentially execute arbitrary code, relying on user interaction and network-based acc...
Tianchoy Blog SQL注入漏洞
Tianchoy Blog is a blog site of Tianchoy personal developer. A SQL injection vulnerability exists in Tianchoy Blog version 1.8.8 and earlier versions, which stems from an incorrect operation of the search parameter that can lead to sql injection...
The vulnerability of the HTTP File Server, related to the failure to take measures to eliminate special elements in the template creation mechanism, allows attackers to execute arbitrary commands.
The vulnerability of the HTTP File Server is related to the lack of measures taken to neutralize special elements in the template creation mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted HTTP requests with the “search”...
Mars: Reflected HTML Injection via contact (faq) search parameter on ██████████
The report describes a reflected HTML injection vulnerability in the contact faq search parameter on the ██████████. A specific HTML payload entered into this parameter was reflected back in the response without proper sanitization, allowing for the execution of arbitrary HTML and potentially...