EUVD-2025-34758

Cross site scripting XSS vulnerability in Ultimate PHP Board 2.2.7 via the uname parameter in lostpassword.php...

CVE-2025-61539

Cross site scripting XSS vulnerability in Ultimate PHP Board 2.2.7 via the uname parameter in lostpassword.php...

PT-2025-42475

Name of the Vulnerable Software and Affected Versions Ultimate PHP Board version 2.2.7 Description An issue exists in Ultimate PHP Board that allows for cross-site scripting XSS. The issue is located in the lostpassword.php file and involves the u name parameter. Exploitation occurs through...

CVE-2025-61539

Cross site scripting XSS vulnerability in Ultimate PHP Board 2.2.7 via the uname parameter in lostpassword.php...

CVE-2025-61539

Ultimate PHP Board version 2.2.7 is vulnerable to a Cross-Site Scripting (XSS) attack due to improper handling of the u_name parameter within the lostpassword.php file. An attacker can exploit this by manipulating the parameter to inject and execute malicious scripts. To mitigate this risk, users...

Online Ordering System Cross-Site Script Vulnerabilities

Online Ordering System is a multi-store ordering system for janobe individual developers. It can be used for any small business. A cross-site scripting vulnerability exists in SourceCodester Gadget Works Online Ordering System version 1.0, which stems from a problem with the file...

CVE-2022-35163

Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the UNAME parameter at /category/controller.php?action=edit...

CVE-2022-35163

Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the UNAME parameter at /category/controller.php?action=edit...

PT-2018-13674

Name of the Vulnerable Software and Affected Versions rejucms version 2.1 Description The issue allows for XSS via the u name parameter in the "ucenter/cms user add.php" API endpoint. Recommendations For rejucms version 2.1, avoid using the u name parameter in the "ucenter/cms user add.php"...

PT-2018-10646

Name of the Vulnerable Software and Affected Versions SearchBlox version 8.6.6 Description The issue concerns a CSRF token bypass in the servlet/UserServlet endpoint. This allows for potential exploitation via the u name, u passwd1, u passwd2, role, and X-XSRF-TOKEN POST parameters. Recommendatio...

PT-2015-5610

Name of the Vulnerable Software and Affected Versions Cosmoshop affected versions not specified Description A cross-site scripting XSS issue exists in the admin-login panel, specifically in the admin/index.cgi endpoint, allowing remote attackers to inject arbitrary web script or HTML via the u na...