214 matches found
CVE-2015-10051: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displayallreplies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as...
Cross site scripting
EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /lilac/main.php...
CVE-2022-41434: Improper Neutralization of Input During Web Page Generation
EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /lilac/main.php...
CVE-2022-41434
CVE-2022-41434 affects EyesOfNetwork Web Interface version 5.3. The vulnerability is a reflected XSS in the /lilac/main.php endpoint. The CVSS vector from multiple sources indicates a NETWORK attack vector with no privileges required but user interaction needed, and impact on confidentiality/ int...
CVE-2022-41434
EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /lilac/main.php...
CVE-2022-34531
DedeCMS v5.7.95 was discovered to contain a remote code execution RCE vulnerability via the component mytag main.php...
CVE-2022-34531: Undefined Security Weakness
DedeCMS v5.7.95 was discovered to contain a remote code execution RCE vulnerability via the component mytag main.php...
Brandbugle SQL Injection Vulnerability
Brandbugle is an e-commerce application from Brandbugle India. Brandbugle is vulnerable to SQL injection, which can be exploited by attackers to cause sql injection issues via /main.php...
CVE-2020-36536
A vulnerability was found in Brandbugle. It has been rated as critical. Affected by this issue is some unknown functionality of the file /main.php. The manipulation leads to sql injection. The attack may be launched remotely...
Sql injection
A vulnerability was found in Brandbugle. It has been rated as critical. Affected by this issue is some unknown functionality of the file /main.php. The manipulation leads to sql injection. The attack may be launched remotely...
CVE-2020-36536 Brandbugle main.php sql injection
A vulnerability was found in Brandbugle. It has been rated as critical. Affected by this issue is some unknown functionality of the file /main.php. The manipulation leads to sql injection. The attack may be launched remotely...
CVE-2020-36536: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Brandbugle. It has been rated as critical. Affected by this issue is some unknown functionality of the file /main.php. The manipulation leads to sql injection. The attack may be launched remotely...
GHSA-5JXP-4X68-MHQC Centreon SQL Injection
Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.24 allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI...
Centreon SQL Injection
Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.28 allows SQL Injection via the main.php searchH parameter...
GHSA-79HG-357G-RRGV Centreon SQL Injection
Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.28 allows SQL Injection via the main.php searchH parameter...
Cross-site Scripting (XSS)
ptrofimov/beanstalkconsole is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in the output parameters in main.php and serversList.php, allowing an attacker to inject and execute malicious javascript...
CVE-2021-39315: Improper Neutralization of Input During Web Page Generation
The Magic Post Voice WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the ids parameter found in the /inc/admin/main.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.2...
CVE-2020-18048
An issue in craigms/main.php of CraigMS 1.0 allows attackers to execute arbitrary commands via a crafted input entered into the DB Name field...
