CVE-2021-43692: Improper Neutralization of Input During Web Page Generation

youtube-php-mirroring last update Jun 9, 2017 is affected by a Cross Site Scripting XSS vulnerability in file ytproxy/index.php...

PT-2021-23918

Name of the Vulnerable Software and Affected Versions: vesta version 0.9.8-24 Description: The issue is related to a file inclusion vulnerability in the file web/add/user/index.php. This vulnerability may allow an attacker to include arbitrary files, potentially leading to code execution or other...

CVE-2021-43693: Undefined Security Weakness

vesta 0.9.8-24 is affected by a file inclusion vulnerability in file web/add/user/index.php...

CVE-2021-41951

ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpresssso/pages/index.php via the wordpressuser parameter. If an attacker is able to persuade a victim to visit a crafted URL, malicious JavaScript content may be executed within the...

CVE-2021-41951: Improper Neutralization of Input During Web Page Generation

ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpresssso/pages/index.php via the wordpressuser parameter. If an attacker is able to persuade a victim to visit a crafted URL, malicious JavaScript content may be executed within the...

Sourcecodester Engineers Online Portal SQL Injection Vulnerability

Sourcecodester Engineers Online Portal is an open source online portal. Sourcecodester Engineers Online Portal in PHP is vulnerable to SQL injection, which can be exploited by attackers to bypass authentication via the login form in index.php...

PT-2021-30939

Уязвимость скрипта index.php микропрограммного обеспечения маршрутизатора D-Link DSL-3782 связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

CVE-2021-42665

CVE-2021-42665 affects the Sourcecodester Engineers Online Portal (PHP) via the login.php form. The vulnerability is an SQL Injection in the authentication routine that can allow bypassing login without valid credentials. Affected component is the login mechanism (username/password fields), with ...

CVE-2021-42665

An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication...

PT-2021-23646

Name of the Vulnerable Software and Affected Versions Sourcecodester Engineers Online Portal affected versions not specified Description A security issue exists in the login form of the Sourcecodester Engineers Online Portal, specifically in the index.php file, allowing an attacker to bypass...

CVE-2021-42665: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication...

PT-2021-5308

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Event Booking and Reservation System affected versions not specified Description The issue exists due to the lack of measures to neutralize special elements, allowing a remote attacker to exploit it and potentially disclo...

CVE-2021-39412: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities exists in PHPGurukul Shopping v3.1 via the 1 callback parameter in a serverside/scripts/idjsonp.php, b serverside/scripts/jsonp.php, and c scripts/objectsjsonp.php, the 2 value parameter in examplessupport/editableajax.php, and the 3 PHPSELF...

Sql injection

SQL Injection vulnerability in eyoucms cms v1.4.7, allows attackers to execute arbitrary code and disclose sensitive information, via the tid parameter to index.php...

PT-2021-10996

Name of the Vulnerable Software and Affected Versions: eyoucms cms version 1.4.7 Description: The issue allows attackers to execute arbitrary code and disclose sensitive information. This is achieved via the tid parameter to the "index.php" endpoint. Recommendations: For eyoucms cms version 1.4.7...

CVE-2020-24000: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in eyoucms cms v1.4.7, allows attackers to execute arbitrary code and disclose sensitive information, via the tid parameter to index.php...

PT-2021-10567

Name of the Vulnerable Software and Affected Versions: shadoweb wdja version 1.5.1 Description: A Cross Site Scripting XSS issue allows attackers to execute arbitrary code and gain escalated privileges via the backurl parameter to the "/php/passport/index.php" endpoint. Recommendations: For...

xujinliang zibbs cross-site scripting vulnerability

Zibbs Zibbs Forum is a Bootstrap-based Php light forum system. xujinliang zibbs version 1.0 is vulnerable to a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of the route parameter in index.php. An attacker could use this vulnerability to execute...

Cross site scripting

Cross site scripting XSS vulnerability in xujinliang zibbs 1.0, allows attackers to execute arbitrary code via the route parameter to index.php...

PT-2021-10936

Name of the Vulnerable Software and Affected Versions zibbs version 1.0 Description A cross-site scripting XSS issue allows attackers to execute arbitrary code via the route parameter to "index.php". This could potentially lead to unauthorized actions on the affected system. Recommendations For...