23 matches found
EUVD-2024-55093
Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail, username, userfirstname, userlastname, and useraddress parameters in userregister.php...
CVE-2024-44652
Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail, username, userfirstname, userlastname, and useraddress parameters in userregister.php...
CVE-2024-44652
Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail, username, userfirstname, userlastname, and useraddress parameters in userregister.php...
CVE-2024-44652: Improper Neutralization of Special Elements used in an SQL Command
Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail, username, userfirstname, userlastname, and useraddress parameters in userregister.php...
EUVD-2021-33135
Malicious code in bioql PyPI...
CVE-2022-23873
Victor CMS v1.0 was discovered to contain a SQL injection vulnerability that allows attackers to inject arbitrary commands via 'userfirstname' parameter...
CVE-2022-23873
Victor CMS v1.0 was discovered to contain a SQL injection vulnerability that allows attackers to inject arbitrary commands via 'userfirstname' parameter...
Sql injection
Victor CMS v1.0 was discovered to contain a SQL injection vulnerability that allows attackers to inject arbitrary commands via 'userfirstname' parameter...
CVE-2022-23873
Victor CMS v1.0 was discovered to contain a SQL injection vulnerability that allows attackers to inject arbitrary commands via 'userfirstname' parameter...
CVE-2022-23873
Victor CMS v1.0 was discovered to contain a SQL injection vulnerability that allows attackers to inject arbitrary commands via 'userfirstname' parameter...
CVE-2022-23873
CVE-2022-23873 affects Victor CMS v1.0, where a SQL injection vulnerability exists in the 'user_firstname' parameter. Multiple connected sources (NVD entry, Red Hat advisory, CNVD/CNNVD variants) describe lack of input validation allowing an attacker to inject SQL commands, potentially impacting ...
CVE-2022-23873: Improper Neutralization of Special Elements used in an SQL Command
Victor CMS v1.0 was discovered to contain a SQL injection vulnerability that allows attackers to inject arbitrary commands via 'userfirstname' parameter...
CVE-2021-46459
Victor CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component admin/users.php?source=adduser. These vulnerabilities can be exploited through a crafted POST request via the username, userfirstname,userlastname, or useremail parameters...
Sql injection
Victor CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component admin/users.php?source=adduser. These vulnerabilities can be exploited through a crafted POST request via the username, userfirstname,userlastname, or useremail parameters...
CVE-2021-46459: Improper Neutralization of Special Elements used in an SQL Command
Victor CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component admin/users.php?source=adduser. These vulnerabilities can be exploited through a crafted POST request via the username, userfirstname,userlastname, or useremail parameters...
CVE-2020-15599
Victor CMS through 2019-02-28 allows XSS via the register.php userfirstname or userlastname field...
Cross site scripting
Victor CMS through 2019-02-28 allows XSS via the register.php userfirstname or userlastname field...
CVE-2020-15599: Improper Neutralization of Input During Web Page Generation
Victor CMS through 2019-02-28 allows XSS via the register.php userfirstname or userlastname field...
Victor CMS 1.0 - (user_firstname) Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Victor CMS 1.0 - 'userfirstname' Persistent Cross-Site Scripting Google Dork: N/A Date: 2020-06-28 Exploit Author: Anushree Priyadarshini Vendor Homepage: https://github.com/VictorAlagwu/CMSsite Software...
Victor CMS 1.0 Cross Site Scripting
Exploit Title: Victor CMS 1.0 - 'userfirstname' Persistent Cross-Site Scripting Google Dork: N/A Date: 2020-06-28 Exploit Author: Anushree Priyadarshini Vendor Homepage: https://github.com/VictorAlagwu/CMSsite Software Link:https://github.com/VictorAlagwu/CMSsite/archive/master.zip Version: 1.0...