Recently modified vulnerabilities for "carmelogarcia intern membership management system"

Where

Sort:

Versions

2.0

Carmelogarcia Intern Membership Management Systemcode-projects Intern Membership Management System User Registration sql injection

Risk 61

Severity

9.8

EPSS

0.06%

SQL Injection

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was found in code-projects Intern Membership Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /userregistration/ of the component User Registration. The manipulation of the argument userName leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-249134 is the identifier assigned to this vulnerability.

First published (updated )

CVE-2023-7131

Carmelogarcia Intern Membership Management Systemcode-projects Intern Membership Management System User Registration cross site scripting

Risk 25

Severity

5.4

EPSS

0.05%

XSS

AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

A vulnerability was found in code-projects Intern Membership Management System 2.0. It has been classified as problematic. This affects an unknown part of the file /userregistration/ of the component User Registration. The manipulation of the argument userName/firstName/lastName/userEmail with the input "><ScRiPt>confirm(document.domain)</ScRiPt>h0la leads to cross site scripting. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249135.

First published (updated )

CVE-2023-7132

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.