Vulnerabilities (CVE)

Filtered by vendor Carmelogarcia Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-7132 1 Carmelogarcia 1 Intern Membership Management System 2024-01-04 N/A 5.4 MEDIUM
A vulnerability was found in code-projects Intern Membership Management System 2.0. It has been classified as problematic. This affects an unknown part of the file /user_registration/ of the component User Registration. The manipulation of the argument userName/firstName/lastName/userEmail with the input "><ScRiPt>confirm(document.domain)</ScRiPt>h0la leads to cross site scripting. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249135.
CVE-2023-7056 1 Carmelogarcia 1 Faculty Management System 2023-12-28 N/A 5.4 MEDIUM
A vulnerability classified as problematic was found in code-projects Faculty Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/pages/subjects.php. The manipulation of the argument Description/Units leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-248743.
CVE-2023-7057 1 Carmelogarcia 1 Faculty Management System 2023-12-28 N/A 6.1 MEDIUM
A vulnerability, which was classified as problematic, has been found in code-projects Faculty Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/pages/yearlevel.php. The manipulation of the argument Year Level/Section leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-248744.