109 matches found
Simple Social Networking Site 跨站脚本漏洞
Social Networking Site is a social networking site. A cross-site scripting vulnerability exists in version 1.0 of Social Networking Site, which stems from the lack of effective filtering and escaping of user-supplied data in the message.php parameter Story, and can be exploited to execute arbitra...
CVE-2024-0722: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in code-projects Social Networking Site 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file message.php of the component Message Page. The manipulation of the argument Story leads to cross site scripting. The attack may be...
PT-2024-15373
Name of the Vulnerable Software and Affected Versions RRJ Nueva Ecija Engineer Online Portal version 1.0 Description A vulnerability has been found in the RRJ Nueva Ecija Engineer Online Portal, affecting the file teacher message.php of the component Create Message Handler. The manipulation of th...
CVE-2023-45343: Improper Neutralization of Special Elements used in an SQL Command
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'ticketid' parameter of the routers/ticket-message.php resource does not validate the characters received and they are sent unfiltered to the database...
PT-2022-10763 · Unknown · Semcms Shop
Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue affects the Ant Message.php file, allowing for SQL injection. Recommendations: For SEMCMS SHOP version 1.1, consider restricting access to the Ant Message.php file until a patch is available. As ...
CVE-2019-9109: Improper Neutralization of Input During Web Page Generation
XSS exists in WUZHI CMS 4.1.0 via index.php?m=message&f=message&v=add&username=XSS to coreframe/app/message/message.php...
CVE-2017-17780: Improper Neutralization of Input During Web Page Generation
The Clockwork SMS clockwork-test-message.php component has XSS via a crafted "to" parameter in a clockwork-test-message request to wp-admin/admin.php. This component code is found in the following WordPress plugins: Clockwork Free and Paid SMS Notifications 2.0.3, Two-Factor Authentication -...
CVE-2017-17586
FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter...
Sql injection
FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter...
CVE-2017-17586
FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter...
CVE-2017-17586
FS Olx Clone 1.0 is affected by a SQL Injection vulnerability exposed via the scat parameter in subpage.php or the pid parameter in message.php. The issue is caused by improper handling of user-supplied input in these parameters, enabling remote attackers to inject SQL commands. Public references...
CVE-2017-17586: Improper Neutralization of Special Elements used in an SQL Command
FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter...
PT-2017-14881
Name of the Vulnerable Software and Affected Versions FS Olx Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the scat parameter in the "subpage.php" endpoint or the pid parameter in the "message.php" endpoint. Recommendations For FS Olx Clone versio...
Multiple SQL Injection Vulnerabilities in phpaaCMS
phpaaCMS is a simple article management system. A SQL injection vulnerability exists in /search.php and /message.php in phpaaCMS v0.5, which can be exploited by attackers to obtain sensitive information about the database...
Design/Logic Flaw
PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/messageupdate.php...
CVE-2017-12984
PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/messageupdate.php...
CVE-2017-12984
PHPMyWind 5.3 is affected by a cross-site scripting (XSS) vulnerability in shoppingcart.php, with related exposure through message.php and admin/message*. The CVE-2017-12984 entry confirms XSS in shoppingcart.php and references associated files (message.php, admin/message.php, admin/message_updat...
CVE-2017-12984: Improper Neutralization of Input During Web Page Generation
PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/messageupdate.php...
PT-2017-12823
Name of the Vulnerable Software and Affected Versions PHPMyWind version 5.3 Description The issue is related to a problem in the shoppingcart.php file, which is also connected to message.php, admin/message.php, and admin/message update.php. This problem allows for XSS. Recommendations For PHPMyWi...
