CVE-2023-1395

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as problematic. This vulnerability affects the function query of the file admin/user/list.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated...

CVE-2023-1395

CVE-2023-1395 affects SourceCodester Yoga Class Registration System 1.0. The issue is in the admin/user/list.php query function: manipulating the name parameter leads to cross-site scripting. Exploitation can be remote and has been disclosed publicly. Connected sources note practical mitigations ...

CVE-2023-1395: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as problematic. This vulnerability affects the function query of the file admin/user/list.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated...

PT-2021-5094

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet affected versions not specified Description The issue is related to a lack of protection in the SQL query structure, which can be exploited through a specially-crafted HTTP request, potentially leading to SQL injection. This...

PT-2021-5056

Name of the Vulnerable Software and Affected Versions Advantech R-SeeNet affected versions not specified Description The issue is related to the lack of protection of the SQL query structure in the surname filter parameter of the user list.php file. This can be exploited by a remote attacker usin...

PT-2020-10360

Name of the Vulnerable Software and Affected Versions SOPlanning version 1.45 Description The issue is related to SQL injection, which can be exploited via the user list.php API endpoint, specifically through the by parameter. Recommendations For SOPlanning version 1.45, avoid using the by...

PT-2020-7754

Name of the Vulnerable Software and Affected Versions SOPPlanning versions prior to 1.33 Description Multiple SQL vulnerabilities exist in various PHP files, including planning.php, user list.php, projets.php, user groupes.php, and groupe list.php. Recommendations For versions prior to 1.33, upda...

PT-2017-11016

Name of the Vulnerable Software and Affected Versions rk-responsive-contact-form version 1.0 Description The issue concerns a lack of sanitization for the $delid variable before it is used in an SQL query, located in the file ./rk-responsive-contact-form/include/rk user list.php. This could...

PT-2014-3563

Name of the Vulnerable Software and Affected Versions Dell KACE K1000 management appliance version 5.5.90545 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the LABEL ID parameter in the adminui/user list.php file. This cou...