Lucene search
K

24 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:35 p.m.0 views

CVE-2023-49987

A cross-site scripting XSS vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname parameter...

5.4CVSS5.8AI score0.00256EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-36058

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.00274EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-24867

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00072EPSS
Exploits1References5
OSV
OSV
added 2025/09/11 12:15 p.m.0 views

CVE-2025-40693

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a reflected and stored authenticated XSS due to the lack of propper validation of user inputs 'tname' parameter via GET and, 'teamleadname', 'teammember' and 'teamname' parameters via POST at the...

5.4CVSS5.9AI score0.00048EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/11 11:36 a.m.5 views

CVE-2025-40693 Cross Site Scripting in PHPGurukul Online Fire Reporting System

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a reflected and stored authenticated XSS due to the lack of propper validation of user inputs 'tname' parameter via GET and, 'teamleadname', 'teammember' and 'teamname' parameters via POST at the...

5.1CVSS0.00048EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/11 12:0 a.m.2 views

Online Fire Reporting System 跨站脚本漏洞

Online Fire Reporting System is an online fire reporting system developed by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in Online Fire Reporting System version 1.2, which stems from insufficient input validation of the GET parameter tname and the POST...

5.4CVSS5.9AI score0.00048EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/16 4:11 p.m.2 views

CVE-2025-8966

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /admin/operations/tax.php. The manipulation of the argument tname leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS7.7AI score0.00072EPSS
Exploits1References1
OSV
OSV
added 2025/08/14 4:15 p.m.0 views

CVE-2025-8966

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /admin/operations/tax.php. The manipulation of the argument tname leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS5.8AI score
Exploits0References5
Cvelist
Cvelist
added 2025/08/14 3:32 p.m.9 views

CVE-2025-8966 itsourcecode Online Tour and Travel Management System tax.php sql injection

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /admin/operations/tax.php. The manipulation of the argument tname leads to sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS0.00072EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/08/14 12:0 a.m.2 views

itsourcecode Online Tour and Travel Management System 注入漏洞

itsourcecode Online Tour and Travel Management System is itsourcecode open source an online tour and travel management system. An injection vulnerability exists in version 1.0 of itsourcecode Online Tour and Travel Management System, which is caused by incorrect manipulation of the parameter tnam...

9.8CVSS7.8AI score0.00072EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/08/14 12:0 a.m.3 views

PT-2025-33304 · Itsourcecode · Itsourcecode Online Tour/Travel Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A vulnerability exists in itsourcecode Online Tour and Travel Management System that affects unknown processing within the /admin/operations/tax.php file...

9.8CVSS7.7AI score0.00072EPSS
Exploits1References7
ATTACKERKB
ATTACKERKB
added 2024/03/07 1:15 a.m.0 views

CVE-2023-49987

A cross-site scripting XSS vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname parameter...

5.4CVSS5.9AI score0.00256EPSS
Exploits1References3
OSV
OSV
added 2024/03/07 1:15 a.m.0 views

CVE-2023-49987

A cross-site scripting XSS vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname parameter...

5.4CVSS5.8AI score0.00256EPSS
Exploits1References2
NVD
NVD
added 2024/03/07 1:15 a.m.8 views

CVE-2023-49987

A cross-site scripting XSS vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname parameter...

5.4CVSS5.6AI score0.00256EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/03/07 12:0 a.m.10 views

CVE-2023-49987

A cross-site scripting XSS vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname parameter...

5.7AI score0.00256EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/03/07 12:0 a.m.1 views

School Fees Management System Security Breach

School Fees Management System is a tuition management system. A security vulnerability exists in School Fees Management System v1.0. The vulnerability can be exploited by an attacker to execute arbitrary web script or HTML via a specially crafted payload that injects the tname parameter...

5.4CVSS6.7AI score0.00256EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/12/20 12:0 a.m.2 views

PT-2023-31446 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Fees Management System version 1.0 Description: A cross-site scripting XSS issue in the /management/term component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname parameter...

5.4CVSS6AI score0.00256EPSS
Exploits1References7
OSV
OSV
added 2022/06/15 5:15 p.m.0 views

CVE-2022-32992

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php...

7.2CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2022/06/15 5:15 p.m.8 views

CVE-2022-32992

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php...

7.2CVSS0.00274EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/15 5:15 p.m.0 views

CVE-2022-32992

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php...

7.2CVSS5.8AI score0.00274EPSS
Exploits1References2
Rows per page
Query Builder