CVE-2026-2736: Improper Neutralization of Input During Web Page Generation

Reflected Cross-site Scripting XSS in Alkacon's OpenCms v18.0, which allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL containing the ‘q’ parameter in ‘/search/index.html’. This vulnerability can be exploited to steal sensitive user...

EUVD-2018-11567

Malware in sbrugna...

CVE-2025-5013: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in HkCms up to 2.3.2.240702. This affects an unknown part of the file /index.php/search/index.html of the component Search. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack...

Sql injection

SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string...

PT-2018-15145

Name of the Vulnerable Software and Affected Versions PbootCMS version 1.2.1 Description The issue is related to SQL injection in the SearchController.php file of PbootCMS. This occurs via the query string in the index.php/Search/index.html endpoint. Recommendations For PbootCMS version 1.2.1,...

CVE-2018-19893: Improper Neutralization of Special Elements used in an SQL Command

SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string...