Code-Projects Blood Bank Cross-Site Scripting Vulnerability

Code-Projects Blood Bank is a blood bank system from the Code-Projects project. A security vulnerability exists in Code-Projects Blood Bank version 1.0, which stems from a stored cross-site scripting XSS vulnerability in the rename and other parameters of the file updateprofile.php...

CVE-2023-39335 - Certificate creation authentication bypass in UPDATEPROFILE handler

Created Date Nov 9, 2023 4:55:50 PM...

Design/Logic Flaw

TeamWork TicketPlus allows Arbitrary File Upload in updateProfile...

CVE-2017-14840: Unrestricted Upload of File with Dangerous Type

TeamWork TicketPlus allows Arbitrary File Upload in updateProfile...

CVE-2017-14840

TeamWork TicketPlus allows Arbitrary File Upload in updateProfile...

CVE-2017-14840

CVE-2017-14840 affects TeamWork TicketPlus. A vulnerability in updateProfile allows Arbitrary File Upload, enabling an attacker to upload arbitrary files via the updateProfile function. Documented impact from CVSSv3 indicates high severity (Impact: Confidentiality, Integrity, Availability all Hig...

CVE-2005-1784

Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for UserProfile.asp...