2416 matches found
Exploit for SQL Injection in Phpgurukul Men_Salon_Management_System
PHPGurukul Men Salon Management System 2.0 + Welcome to the PH...
Event Registration System SQL注入漏洞
Event Registration System is a QR code based event registration system by Carlo Montero, an individual developer. An SQL injection vulnerability exists in Event Registration System version 1.0, which originates from an unknown function in Portal.php that causes SQL injection via the...
Directory Management System SQL注入漏洞
Directory Management System is a directory management system by the individual developer Anuj Kumar. A SQL injection vulnerability exists in Directory Management System version 1.0, which originates from an unknown function in /admin/index.php that causes SQL injection via the parameter username...
Tenant Limited 1.0 SQL Injection
Titles: TENANT-LIMITED-1.0 SQLi Author: nu11secur1ty Date: 05/20/2024 Vendor: https://mayurik.com/ Software: https://www.sourcecodester.com/php/17375/best-courier-management-system-project-php.html Reference: https://portswigger.net/web-security/sql-injection Description: The username parameter...
Simple Inventory System SQL注入漏洞
Simple Inventory System is a simple inventory system by argie individual developer. SourceCodester Simple Inventory System version 1.0 suffers from a SQL injection vulnerability that originates from the parameter username in the file login.php...
PT-2024-34483 · Unknown · Sourcecodester Simple Inventory System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Inventory System version 1.0 Description: A critical issue has been found in the SourceCodester Simple Inventory System, affecting an unknown functionality of the file login.php. The manipulation of the username argument...
Online Course Registration System 安全漏洞
Online Course Registration System is an online course registration system by the individual developer ANUJ KUMAR. A security vulnerability exists in PHPGurukul Online Course Registration System version 3.1, which originates from the parameters username/password in the file /admin/index.php that c...
Konga is vulnerable to Cross Site Scripting (XSS) attacks
Konga v0.14.9 is vulnerable to Cross Site Scripting XSS via the username parameter...
GHSA-93PF-MRC8-4G3H Konga is vulnerable to Cross Site Scripting (XSS) attacks
Konga v0.14.9 is vulnerable to Cross Site Scripting XSS via the username parameter...
CVE-2024-34243
Konga v0.14.9 is vulnerable to Cross Site Scripting XSS via the username parameter...
CVE-2024-4822
Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the username and password parameters in '/index.php'. This vulnerability allows an attacker to partially take control of the victim's browser session...
CVE-2024-34243
Konga v0.14.9 is vulnerable to Cross Site Scripting XSS via the username parameter...
CVE-2024-34243
CVE-2024-34243 affects Konga v0.14.9 with Cross-Site Scripting (XSS) via the username parameter. The linked sources indicate the underlying issue is inadequate input validation on the username field, enabling injected scripts. The CVE is recorded with a CVSS v3.1 base score of 5.4 (Medium) and sh...
CVE-2024-34243
Konga v0.14.9 is vulnerable to Cross Site Scripting XSS via the username parameter...
Laundry Management System 跨站脚本漏洞
Laundry Management System is a laundry management system. A cross-site scripting vulnerability exists in Online Laundry Management System version 1.0, which originates from a cross-site scripting vulnerability in the name/customername/username parameter of the /ajax.php file...
Web-School ERP 跨站脚本漏洞
Web-School ERP is an application from Web-School India, Inc. An ERP application. A cross-site scripting vulnerability exists in Web-School ERP version 1.0, which stems from a cross-site scripting vulnerability in the username and password parameters of the /index.php page...
PT-2024-25763 · Konga · Konga
Name of the Vulnerable Software and Affected Versions: Konga version 0.14.9 Description: The issue allows for Cross Site Scripting XSS via the username parameter. Recommendations: For Konga version 0.14.9, avoid using the username parameter until the issue is resolved...
PT-2024-33031 · Unknown · School Erp Pro+Responsive
Name of the Vulnerable Software and Affected Versions: School ERP Pro+Responsive version 1.0 Description: The issue allows an attacker to partially take control of the victim's browser session through a cross-site scripting XSS attack. This is achieved by exploiting the username and password...