2097 matches found
Cross site scripting
EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting XSS in the Admin Panel - Manage User tab using the Full Name of the user. This vulnerability can result in the attacker injecting the XSS payload in the User Registration section and each tim...
Cross site scripting
EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting XSS in the Admin Profile Page. This vulnerability can result in the attacker injecting the XSS payload in Admin Full Name and each time admin visits the Profile page from the admin panel, the...
CVE-2020-29230
CVE-2020-29230 affects EGavilanMedia User Registration and Login System With Admin Panel 1.0. The vulnerability is an cross-site scripting (XSS) flaw in the Admin Panel – Manage User tab, exploited via the Full Name field in user registration. The described impact is that an attacker can inject a...
CVE-2020-29230
EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting XSS in the Admin Panel - Manage User tab using the Full Name of the user. This vulnerability can result in the attacker injecting the XSS payload in the User Registration section and each tim...
CVE-2020-29228
CVE-2020-29228 affects EGavilanMedia User Registration and Login System With Admin Panel 1.0. The vulnerability is a SQL injection on the User Login Page, arising from insufficient input validation on login parameters. Multiple connected sources (Red Hat, CNVD, CVE listings) corroborate the same ...
CVE-2020-29228
EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by SQL injection in the User Login Page...
Egavilanmedia User Registration & Login System 跨站脚本漏洞
Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A cross-site scripting vulnerability exists in EGavilanMedia User Registration and Login System With Admin Panel version 1.0, which can be exploited by an attacker to...
Egavilanmedia User Registration & Login System SQL注入漏洞
Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A SQL injection vulnerability exists in EGavilanMedia User Registration and Login System With Admin Panel version 1.0, which stems from a lack of validation of external...
CVE-2020-26766
A Cross Site Request Forgery CSRF vulnerability exists in the loginsystem page in PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1...
CVE-2020-26766
A Cross Site Request Forgery CSRF vulnerability exists in the loginsystem page in PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1...
Cross site request forgery (csrf)
A Cross Site Request Forgery CSRF vulnerability exists in the loginsystem page in PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1...
CVE-2020-26766
CVE-2020-26766 affects PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1, involving a Cross Site Request Forgery (CSRF) vulnerability in the loginsystem page. The connected sources consistently describe the issue as CSRF on the loginsystem page, with no further ...
Egavilanmedia User Registration & Login System Cross-Site Request Forgery Vulnerability
Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A cross-site request forgery vulnerability exists in EgavilanMedia User Registration & Login System with Admin Panel 1.0, which allows to remotely obtain privileges to ...
Phpgurukul User Registration Login Management System Cross-Site Request Forgery Vulnerability
Phpgurukul User Registration Login Management System is a website builder for user management by the PHPGurukul Phpgurukul team. A cross-site request forgery vulnerability exists in version 2.1 of the PHPGurukul User Registration & Login and User Management System, which originates on the User...
CVE-2020-35676
BigProf Online Invoicing System before 3.1 fails to correctly sanitize an XSS payload when a user registers using the self-registration functionality. As such, an attacker can input a crafted payload that will execute upon the application's administrator browsing the registered users' list. Once...
CVE-2020-35676
BigProf Online Invoicing System before 3.1 fails to correctly sanitize an XSS payload when a user registers using the self-registration functionality. As such, an attacker can input a crafted payload that will execute upon the application's administrator browsing the registered users' list. Once...
Cross site scripting
BigProf Online Invoicing System before 3.1 fails to correctly sanitize an XSS payload when a user registers using the self-registration functionality. As such, an attacker can input a crafted payload that will execute upon the application's administrator browsing the registered users' list. Once...
CVE-2020-35252
Cross Site Scripting XSS vulnerability via the 'Full Name' parameter in the User Registration section of User Registration & Login System with Admin Panel 1.0...