CVE-2025-1870: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagedescription" parameter in admin/aboutus.php...

CVE-2025-25352: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in /admin/aboutus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the pagetitle POST request parameter...

CVE-2024-13080: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in PHPGurukul Land Record System 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/aboutus.php. The manipulation of the argument Page Description leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2024-13017: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/aboutus.php of the component About Us Page. The manipulation of the argument title leads to cross site scripting. The attack c...

CVE-2024-2720 Campcodes Complete Online DJ Booking System aboutus.php cross site scripting

A vulnerability classified as problematic was found in Campcodes Complete Online DJ Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to cross site scripting. The attack can be launched...

CVE-2024-2720 Campcodes Complete Online DJ Booking System aboutus.php cross site scripting

A vulnerability classified as problematic was found in Campcodes Complete Online DJ Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to cross site scripting. The attack can be launched...

CVE-2024-2720: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in Campcodes Complete Online DJ Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to cross site scripting. The attack can be launched...

CVE-2023-37745: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Description of the /admin/aboutus.php component...

Cross site request forgery (csrf)

An issue was discovered in portfolioCMS 1.0.5. There is CSRF to update the website settings via admin/aboutus.php...

berkoot.com XSS vulnerability

Open Bug Bounty ID: OBB-601649 Description| Value ---|--- Affected Website:| berkoot.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

4d.mk XSS vulnerability

Vulnerable URL: http://www.4d.mk/aboutUs.php?lang=en" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6636722 VIP website status:| No Check 4d.mk SSL connection:| Grade: A Coordinat...

Mallbuilder /mallbuilder/aboutus.php文件 type 参数SQL注入漏洞

0x01 漏洞概述 相关厂商： 上海远丰信息科技有限公司 官方主页： shop-builder.cn 提交时间： 2015-06-17 公开时间： 2015-09-20 漏洞类型： SQL注射漏洞 谷歌关键字： powered by mallbuilder 在文件product/admin/cpmod.php中，id参数未过滤造成注入。 0x02 漏洞详情 首先来看看全局文件 function magic if!getmagicquotesgpc&&isset$POST foreach$POST as $key=$v if!isarray$v $POST$key=addslashes$v...

Sql injection

Multiple SQL injection vulnerabilities in Tourism Script Bus Script allow remote attackers to execute arbitrary SQL commands via the sitetextid parameter to 1 aboutus.php and 2 faq.php...

CVE-2009-4618

Multiple SQL injection vulnerabilities in Tourism Script Bus Script allow remote attackers to execute arbitrary SQL commands via the sitetextid parameter to 1 aboutus.php and 2 faq.php...

CVE-2009-4618

Multiple SQL injection vulnerabilities in Tourism Script Bus Script allow remote attackers to execute arbitrary SQL commands via the sitetextid parameter to 1 aboutus.php and 2 faq.php...

Bus Script - 'sitetext_id' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability aboutus.php sitetextid Bus Script http://www.tourismscripts.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :- www.TraGeT.CoM/aboutus.php?sitetextid=-1'+UNION+SELECT+0,CONCATWS0x3a3a,username,password,0+FROM+user...

Bus Script (sitetext_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== Bus Script sitetextid Remote SQL Injection Vulnerability =========================================================== Remote SQL Injection Vulnerability aboutus.php sitetextid Bus...