1480 matches found
Lyrion Music Server <= 9.2.0 - Cross-Site Scripting
Lyrion Music Server 9.2.0 contains a reflected XSS caused by improper sanitization of the search parameter in the server.log endpoint, letting unauthenticated attackers execute arbitrary script in users' browsers. id: CVE-2026-50230 info: name: Lyrion Music Server = 9.2.0 - Cross-Site Scripting...
cve-2022-42889-text4shell-docker
Install maven - maven-linux 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080 text4shell 4. Test the app http://localhost/text4shell/attack?search= 5. Attack can be performed by passing a string...
WordPress-XStore-theme-SQL-Injection
WordPress-XStore-theme-SQL-Injection CVE-2024-33559 XStore theme-SQL Injection CVE-2024-33551 is a SQL injection vulnerability found in 8theme XStore, an ecommerce platform built on WordPress. This vulnerability allows attackers to execute malicious SQL commands on the database, which can lead to...
CVE-2020-35545
CVE-2020-35545 Spotweb 1.4.9 - 'search' SQL Injection...
CVE-2026-76569
Phoca Download의 검색 GET 매개변수를 통한 반사형 XSS Phoca Download ≤ 6.1.4 — 인증된 공격자가 사용자 제어판의 조작된 검색 URL을 통해 임의 JavaScript 실행 요약 Joomla용 Phoca Downloadcomphocadownload에는 사용자 제어판 파일 검색 기능에 반사형 교차 사이트 스크립팅XSS 취약점이 존재합니다. search GET 매개변수는 Joomla의 'string' 필터로 처리되는데, 이 필터는 striptags만 호출하고 " 문자를 보존합니다. 이후...
text4shell-cve-2022-42889
Text4Shell CVE-2022-42889 Docker Lab for CVE-2022-42889 You can either build the Docker image locally or pull the image from Docker Hub and run the container. Clone the repo git clone https://github.com/devenes/text4shell-cve-2022-42889.git Build the Docker image locally docker build...
CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability
CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overvi...
CVE-2016-10993
CVE-2016-10993 Wordpress Vulnerability - XSS Cross-Site Scripting Vulnerability Location https://themesinfo.com/scoreme-wordpress-theme-design-496 Proof of Concept PoC https://example.com/?s=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E Refrensi...
CVE-2024-50969
CVE-2024-50969 Description A Reflected cross-site scripting XSS vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote attackers to inject arbitrary web scripts or HTML via the search parameter. Vulnerability Type Cross Site Scripting XSS Vendor of Product Code-projects...
CVE-2022-38553
CVE-2022-38553 CROSS SITE SCRIPTING XSS ON "ACADEMY LEARNING MANAGEMENT SYSTEM" POC VIDEO: Security Risk: This security vulnerability allows to execute arbitrary JavaScript code in user browser if they access URL prepared by attackers...
CVE-2023-34632
CVE-2023-34632 Reflected XSS in 1000projects Book Management System 1.0 CVE-2023-34632 Reflected Cross-Site Scripting XSS in 1000projects Book Management System 1.0 Description A Reflected Cross-Site Scripting XSS vulnerability was discovered in 1000projects Book Management System version 1.0. Th...
THM-Steel_Mountain-CVE-2014-6287
THM-SteelMountain-CVE-2014-6287 A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287 Credits I take no credit for the original discovery and exploitation of this vulnerability. Thank you to the following people! Discovery: Daniele Linguaglossa Metasploit Module...
CVE-2025-61454
🛡️ CVE 공개: CVE-2025-61454 — 전자상거래 프로젝트의 반사형 XSS 공개 날짜: 2025년 10월 14일 CVE ID: CVE-2025-61454 심각도: 중간 CVSS 6.1 🧩 요약 E-commerce Project v1.0의 search.php 엔드포인트에 반사형 교차 사이트 스크립팅XSS 취약점이 존재합니다. search 매개변수의 무결화되지 않은 입력이 응답 HTML에 직접 반영되어, 공격자가 악성 링크를 방문하거나 조작된 요청을 제출한 사용자의 브라우저에서 임의의 JavaScript를 실행할 수...
CVE-2023-51810
CVE-2023-51810 설명 StackIdeas EasyDiscuss v.5.0.5의 블라인드 SQL 인젝션 취약점으로, 원격 공격자가 Users 모듈의 search 매개변수를 통해 민감한 정보를 획득할 수 있습니다. 제품 StackIdeas EasyDiscuss v5.0.5 - EasyDiscuss - Joomla Forum Discussion Tool - StackIdeas 해결 방법 5.0.10 이상 버전으로 업그레이드하세요. 버전 5.0.6-5.0.9는 공개된 소스 코드가 없어 테스트되지 않았습니다. 절차 Jooml...
CVE-2026-9848
CVE-2026-9848 CVE-2026-9848 is an Unauthenticated SQL Injection SQLi vulnerability affecting the WP Ticket Customer Support Ticket System & Helpdesk plugin for WordPress up to and including version 6.0.4.The flaw occurs because the plugin takes the WordPress search parameter s and concatenates it...
CVE-2026-89427 Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via 's' Search Parameter
The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 's' Search Parameter in all versions up to, and including, 2.8.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
EUVD-2026-89438
The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability...
CVE-2026-63713
The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability...
CVE-2026-63713
The Toptech TMS7 and TopHAT systems are vulnerable to a time-based blind SQL injection vulnerability. This security flaw exists within the "search" parameter of the view audit logs feature, located in the utilities section. Impacting the confidentiality and availability of the system, the vulnera...