EUVD-2023-23611

Malicious code in bioql PyPI...

CVE-2022-46095

Sourcecodester Covid-19 Directory on Vaccination System 1.0 was discovered to contain a Cross-Site Scripting XSS vulnerability via verification.php because the program does not verify the txtvaccinationID parameter...

CVE-2024-9080: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Student Record System 1.0. It has been classified as critical. Affected is an unknown function of the file /pincode-verification.php. The manipulation of the argument pincode leads to sql injection. It is possible to launch the attack remotely. The explo...

CVE-2024-5066: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul Online Course Registration System 3.1. Affected by this vulnerability is an unknown functionality of the file /pincode-verification.php. The manipulation of the argument pincode leads to sql injection. The attack can be launched...

PT-2024-34385

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Course Registration System version 3.1 Description: A critical vulnerability was found in the PHPGurukul Online Course Registration System, affecting an unknown functionality of the file /pincode-verification.php. The...

CVE-2023-1353 SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System verification.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0. Affected is an unknown function of the file verification.php. The manipulation of the argument txtvaccinationID leads to cross site scriptin...

CVE-2023-1353 SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System verification.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0. Affected is an unknown function of the file verification.php. The manipulation of the argument txtvaccinationID leads to cross site scriptin...

CVE-2023-1353: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0. Affected is an unknown function of the file verification.php. The manipulation of the argument txtvaccinationID leads to cross site scriptin...

CVE-2022-46095

Sourcecodester Covid-19 Directory on Vaccination System 1.0 was discovered to contain a Cross-Site Scripting XSS vulnerability via verification.php because the program does not verify the txtvaccinationID parameter...

Cross site scripting

Sourcecodester Covid-19 Directory on Vaccination System 1.0 was discovered to contain a Cross-Site Scripting XSS vulnerability via verification.php because the program does not verify the txtvaccinationID parameter...

CVE-2022-46095

Sourcecodester Covid-19 Directory on Vaccination System 1.0 was discovered to contain a Cross-Site Scripting XSS vulnerability via verification.php because the program does not verify the txtvaccinationID parameter...

CVE-2022-46095

Sourcecodester Covid-19 Directory on Vaccination System 1.0 contains an XSS vulnerability in verification.php due to lack of validation of the txtvaccinationID parameter. Affected component: verification.php; vulnerable vector is input handling, enabling cross-site scripting. CVSS v3.1 base score...

CVE-2022-46095: Improper Neutralization of Input During Web Page Generation

Sourcecodester Covid-19 Directory on Vaccination System 1.0 was discovered to contain a Cross-Site Scripting XSS vulnerability via verification.php because the program does not verify the txtvaccinationID parameter...

PT-2020-13109

Name of the Vulnerable Software and Affected Versions Online Course Registration version 2.0 Description The issue concerns multiple SQL injections that can lead to a complete database compromise and authentication bypass in various login pages, including admin/change-password.php, admin/check...

CVE-2020-12429: Improper Neutralization of Special Elements used in an SQL Command

Online Course Registration 2.0 has multiple SQL injections that would can lead to a complete database compromise and authentication bypass in the login pages: admin/change-password.php, admin/checkavailability.php, admin/index.php, change-password.php, checkavailability.php, includes/header.php,...

CVE-2014-9613: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Netsweeper before 2.6.29.10 allow remote attackers to execute arbitrary SQL commands via the 1 login parameter to webadmin/auth/verification.php or 2 dpid parameter to webadmin/deny/index.php...

PT-2020-7783

Name of the Vulnerable Software and Affected Versions: Netsweeper versions prior to 2.6.29.10 Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the login parameter to the "webadmin/auth/verification.php" API endpoint or the dpid parameter t...

PT-2013-1963

Name of the Vulnerable Software and Affected Versions Age Verification plugin versions 0.4 and earlier Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. This is achieved via a URL in the redirect to parameter. Recommendations For...