Lucene search
+L

48 matches found

CVE
CVE
added 2021/11/03 6:40 p.m.194 views

CVE-2021-43141

CVE-2021-43141 affects Sourcecodester Simple Subscription Website 1.0. The vulnerability is a Cross Site Scripting (XSS) flaw exploitable via the id parameter in plan_application (and, per some sources, also via users_application). Root cause is improper handling/validation of user input in the a...

6.1CVSS6AI score0.01396EPSS
SaveIn wildExploits1References4Affected Software1
Cvelist
Cvelist
added 2021/11/03 6:40 p.m.35 views

CVE-2021-43141

Cross Site Scripting XSS vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in planapplication...

6.1AI score0.01396EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2021/11/03 6:38 p.m.45 views

CVE-2021-43140

SQL Injection vulnerability exists in Sourcecodester. Simple Subscription Website 1.0. via the login...

10AI score0.04729EPSS
SaveExploits4References3
CVE
CVE
added 2021/11/03 6:38 p.m.94 views

CVE-2021-43140

Sourcecodester Simple Subscription Website 1.0 is affected by a SQL Injection in the login/authentication flow. The vulnerability arises in the login endpoint (e.g., plan_application/Actions.php?a=login) and can be exploited with input like admin' or 1=1-- to bypass authentication and potentially...

9.8CVSS9.8AI score0.04729EPSS
SaveExploits4References3Affected Software1
Positive Technologies
Positive Technologies
added 2021/11/03 12:00 a.m.13 views

PT-2021-23752 · Unknown · Sourcecodester Simple Subscription Website

Name of the Vulnerable Software and Affected Versions: Sourcecodester Simple Subscription Website version 1.0 Description: A Cross Site Scripting XSS issue exists due to the id parameter in plan application. This allows for potential malicious script execution. Recommendations: For version 1.0,...

6.1CVSS6.7AI score0.01396EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2021/11/03 12:00 a.m.15 views

Simple Subscription Website SQL注入漏洞

Simple Subscription Website is a web-based application. SourceCodester Simple Subscription Website 1.0 is vulnerable to SQL injection, which can be exploited by attackers to perform SQL injection via login...

9.8CVSS5.8AI score0.04729EPSS
SaveExploits4References6
CNNVD
CNNVD
added 2021/11/03 12:00 a.m.12 views

Simple Subscription Website 跨站脚本漏洞

SourceCodester Simple Subscription Website is a web-based application. sourceCodester Simple Subscription Website 1.0 is vulnerable to cross-site scripting, which can be exploited by attackers to execute cross-site scripting via the plan application's id parameter to execute cross-site scripting...

6.1CVSS4.8AI score0.01396EPSS
SaveExploits1References5
Packet Storm
Packet Storm
added 2007/01/24 12:00 a.m.31 views

paypal-inject.txt

Paypal Subscription Manager allows webmaster easily create subscription web site, visitors can access to digital product instantly after paying through Paypal, PSM provides ability to effortlessly process subscription and protect membership areas. PSM uses PHP and MySQL for fast, efficient,...

7.4AI score
SaveExploits0
Rows per page
Query Builder