8 matches found
CVE-2024-44728
Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact in /clientdetails/admin/regester.php...
CVE-2024-44728
Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact in /clientdetails/admin/regester.php...
CVE-2024-44727: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php...
CVE-2024-44728
Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact in /clientdetails/admin/regester.php...
CVE-2024-44728
The Sourcecodehero Event Management System version 1.0 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input via the Full Name , Address , Email , and contact# parameters in the /clientdetails/admin/regester.php endpoint. This vulnerability al...
CVE-2024-44728: Improper Neutralization of Input During Web Page Generation
Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact in /clientdetails/admin/regester.php...
CVE-2024-44727
Sourcecodehero Event Management System 1.0 is vulnerable to an SQL Injection via the username parameter in /event/admin/login.php. Documented across multiple feeds; no patch/version fix details are provided in the supplied materials. Exploitation details, impact, and mitigations beyond the generi...
