13485 matches found
CVE-2020-26051: Improper Neutralization of Special Elements used in an SQL Command
College Management System Php 1.0 suffers from SQL injection vulnerabilities in the index.php page from POST parameters 'unametxt' and 'pwdtxt', which are not filtered before passing a SQL query...
CVE-2021-3293: Undefined Security Weakness
emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file...
PT-2021-11210
Name of the Vulnerable Software and Affected Versions: College Management System Php version 1.0 Description: The issue concerns SQL injection vulnerabilities in the index.php page. These vulnerabilities arise from the POST parameters unametxt and pwdtxt, which are not filtered before being passe...
CVE-2021-3340
A cross-site scripting XSS vulnerability in many forms of Wikindx before 5.7.0 and 6.x through 6.4.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter to index.php?action=initLogon or modules/admin/DELETEIMAGES.php...
CVE-2021-3340: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in many forms of Wikindx before 5.7.0 and 6.x through 6.4.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter to index.php?action=initLogon or modules/admin/DELETEIMAGES.php...
CVE-2020-24271: Cross-Site Request Forgery (CSRF)
A CSRF vulnerability was discovered in EasyCMS v1.6 that can add an admin account through index.php?s=/admin/rbacuser/insert/navTabId/rbacuser/callbackType/closeCurrent, then post username=&password=...
PT-2021-20133
Name of the Vulnerable Software and Affected Versions Wikindx versions prior to 5.7.0 Wikindx versions 6.x through 6.4.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the message parameter to "index.php?action=initLogon" or...
Revive Adserver Cross-Site Scripting Vulnerability (CNVD-2021-07540)
Revive Adserver is an open source ad server under the GNU General Public License license with an integrated banner management interface and a tracking system for collecting statistical information. A reflected cross-site scripting vulnerability exists in userlog-index.php in Revive Adserver...
CVE-2021-22874
Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the periodpreset parameter...
Cross site scripting
Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the periodpreset parameter...
CVE-2021-22874
Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the periodpreset parameter...
CVE-2021-22874
Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the periodpreset parameter...
CVE-2021-22874
Revive Adserver prior to 5.1.1 is affected by a reflected XSS in userlog-index.php via the period_preset parameter. Public details include a proof-of-concept from HackerOne showing injection on /admin/userlog-index.php with period_preset, enabling script injection and potential cookie theft or re...
PT-2021-15247
Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 5.1.1 Description The issue is related to a reflected XSS vulnerability. It affects the userlog-index.php file via the period preset parameter. Recommendations For versions prior to 5.1.1, update to version...
CVE-2021-22874: Improper Neutralization of Input During Web Page Generation
Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the periodpreset parameter...
CVE-2020-19362: Improper Neutralization of Input During Web Page Generation
Reflected XSS in Vtiger CRM v7.2.0 in vtigercrm/index.php? through the view parameter can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page...
PT-2021-10343
Name of the Vulnerable Software and Affected Versions: Vtiger CRM version 7.2.0 Description: The issue is related to Reflected XSS in Vtiger CRM, where an attacker can perform malicious actions on users who open a maliciously crafted link or third-party web page through the view parameter in...
PT-2021-16506
Name of the Vulnerable Software and Affected Versions: OpenCATS versions 0.9.5-3 and earlier Description: The issue arises from the unsafe deserialization of requests to "index.php?m=activity", leading to remote code execution. This occurs because lib/DataGrid.php calls unserialize for the...
