PT-2023-17431 · Unknown · Campcodes Video Sharing Website

Name of the Vulnerable Software and Affected Versions: Campcodes Video Sharing Website version 1.0 Description: A critical issue has been found in the software, affecting an unknown functionality of the file signup.php. The manipulation of the id argument leads to SQL injection. The attack can be...

CVE-2023-27212: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in /php-opos/signup.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter...

CVE-2023-1036

The CVE-2023-1036 issue affects SourceCodester Dental Clinic Appointment Reservation System v1.0, specifically the POST Parameter Handler in the /APR/signup.php file. The root cause is manipulation of the firstname parameter, leading to cross-site scripting. Impact is described as a remotely init...

CVE-2023-1036 SourceCodester Dental Clinic Appointment Reservation System POST Parameter signup.php cross site scripting

A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /APR/signup.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross...

CVE-2023-1036: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /APR/signup.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross...

Cross site scripting

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in signup.php...

CVE-2023-24191

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in signup.php...

CVE-2023-24191

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in signup.php...

CVE-2023-24191: Improper Neutralization of Input During Web Page Generation

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in signup.php...

CVE-2023-24191

CVE-2023-24191 affects Online Food Ordering System v2, with a cross-site scripting (XSS) vulnerability triggered by the redirect parameter in signup.php. The CVSS 3.1 vector indicates Network attack, Low attack complexity, No privileges, User interaction required, and a Changed scope with Low imp...

Lifestyle Store 1.0 Cross Site Scripting

Lifestyle Store 1.0 Cross Site Scripting Exploit Title: Lifestyle Store Online Shop Store 1.0 - Reflected Cross-Site Scripting XSS Date: 2021-10-12 Author: Thamer https://twitter.com/thamer9900 Software Link: https://download-media.code-projects.org/2021/07/OnlineShopStoreInPHPWithSourceCode.zip...

PT-2020-17386

Name of the Vulnerable Software and Affected Versions BigProf Online Invoicing System versions prior to 3.1 Description The issue arises from the failure to correctly sanitize an XSS payload when a user registers using the self-registration functionality. This allows an attacker to input a crafte...

Cross site scripting

An issue was discovered in Bilboplanet 2.0. Stored XSS exists in the fullname parameter to signup.php...

Cross site scripting

An issue was discovered in Bilboplanet 2.0. Stored XSS exists in the userid parameter to signup.php...

CVE-2014-9918

An issue was discovered in Bilboplanet 2.0. Stored XSS exists in the userid parameter to signup.php...

CVE-2014-9918

The connected documents confirm a Stored XSS vulnerability in Bilboplanet 2.0 affecting the signup.php endpoint via the user_id parameter. Root cause and technical details are not expanded beyond this description in the provided sources; no explicit exploit code or affected versions are listed. P...

CVE-2014-9919

CVE-2014-9919 affects Bilboplanet 2.0 with a Stored XSS in the signup.php fullname parameter. The NVD entry lists a CVSS‑v3 base score of 6.1 (MEDIUM): AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, i.e., network attack, no availability impact, but partial confidentiality/integrity impact with user interac...

CVE-2014-9919

An issue was discovered in Bilboplanet 2.0. Stored XSS exists in the fullname parameter to signup.php...

PT-2019-7157

Name of the Vulnerable Software and Affected Versions Bilboplanet version 2.0 Description A stored XSS issue exists due to improper handling of user input in the fullname parameter to the "signup.php" endpoint. Recommendations For Bilboplanet version 2.0, update the software to a version that...

CVE-2014-9918: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Bilboplanet 2.0. Stored XSS exists in the userid parameter to signup.php...