Lucene search
+L

9 matches found

CVE
CVE
•added 2026/06/29 12:45 p.m.•63 views

CVE-2026-13568

Affected product: SourceCodester Inventory Management System 1.0. Vulnerability: In the User Registration Endpoint, the /api/users_handler.php component mishandles the role argument, enabling improper access controls. This enables remote exploitation. Impact details (as stated): Remote exploitati...

7.5CVSS6.8AI score0.00472EPSS
SaveExploits0References5
NVD
NVD
•added 2024/05/04 8:15 p.m.•23 views

CVE-2024-34469

Rukovoditel before 3.5.3 allows XSS via userphoto to index.php?module=users/registration&action=save...

7.1CVSS5.7AI score0.00589EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/05/04 12:00 a.m.•37 views

CVE-2024-34469

Rukovoditel before 3.5.3 allows XSS via userphoto to index.php?module=users/registration&action=save...

5.8AI score0.00589EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/04/22 12:00 a.m.•19 views

PT-2023-18493 · Sourcecodester · Sourcecodester Complaint Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Complaint Management System version 1.0 Description: A critical issue was found in the SourceCodester Complaint Management System, affecting some unknown functionality of the file users/registration.php of the component POST...

8.8CVSS6.9AI score0.00723EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2018/09/12 12:00 a.m.•4 views

PT-2018-13810

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4 Description The issue occurs when an individual attempts to register an account with a crafted password parameter to the "users/registration" endpoint. This is a distinct issue from previously identified...

6.1CVSS0.00855EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/12 12:00 a.m.•7 views

CVE-2018-16978: Improper Neutralization of Input During Web Page Generation

Monstra CMS V3.0.4 has XSS when ones tries to register an account with a crafted password parameter to users/registration, a different vulnerability than CVE-2018-11473...

6.1CVSS6.8AI score0.00855EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/05/25 12:00 a.m.•7 views

PT-2018-10592

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4 Description The issue concerns a security problem where an attacker can inject malicious code. The registration form is affected, specifically the login parameter in the 'users/registration' endpoint. Recommendations...

6.1CVSS0.02238EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/25 12:00 a.m.•5 views

CVE-2018-11473: Improper Neutralization of Input During Web Page Generation

Monstra CMS 3.0.4 has XSS in the registration Form i.e., the login parameter to users/registration...

6.1CVSS6.8AI score0.02238EPSS
SaveExploits0References2
myhack58
myhack58
•added 2009/02/05 12:00 a.m.•27 views

Details Facebook the latest high-risk XSS security vulnerability-vulnerability warning-the black bar safety net

Recently, Facebook discovered high-riskXSSto security vulnerabilities, causing its users to suffer huge threat. This article will for these vulnerabilities are published in detail. Facebook in 2 0 0 8 year 1 2 on 1 5 December 2 0 0 9 years 1 months 4 days was traced to a series of high-riskXSSa...

6.8AI score
SaveExploits0
Rows per page
Query Builder