8 matches found
CVE-2026-105232 kishor-23 food-waste-management-system Registration deliverysignup.php sql injection
A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file delivery/deliverysignup.php of the component Registration Page. This manipulation of the...
CVE-2026-105232: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file delivery/deliverysignup.php of the component Registration Page. This manipulation of the...
EUVD-2024-1627
Malicious code in bioql PyPI...
CVE-2015-8667
Cross-site scripting XSS vulnerability in Reset Your Password module in Exponent CMS before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the Username/Email...
CVE-2015-8667
Cross-site scripting XSS vulnerability in Reset Your Password module in Exponent CMS before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the Username/Email...
PT-2017-7460
Name of the Vulnerable Software and Affected Versions Exponent CMS versions prior to 2.3.5 Description A cross-site scripting XSS issue exists in the Reset Your Password module, allowing remote attackers to inject arbitrary web script or HTML via the Username/Email field. Recommendations For...
CVE-2015-8667: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Reset Your Password module in Exponent CMS before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the Username/Email...
CVE-2006-0103: Exposure of Sensitive Information to an Unauthorized Actor
TinyPHPForum 3.6 and earlier stores the 1 users/USERNAME.hash and 2 users/USERNAME.email files under the web root with insufficient access control, which allows remote attackers to list all registered users and possibly obtain other sensitive information...