CVE-2023-3858 phpscriptpoint Car Listing search.php cross site scripting

A vulnerability has been found in phpscriptpoint Car Listing 1.6 and classified as problematic. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument country/state/city leads to cross site scripting. The attack can be initiated remotely. VDB-235210 is t...

CVE-2023-3858 phpscriptpoint Car Listing search.php cross site scripting

A vulnerability has been found in phpscriptpoint Car Listing 1.6 and classified as problematic. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument country/state/city leads to cross site scripting. The attack can be initiated remotely. VDB-235210 is t...

CVE-2023-33734

BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php...

CVE-2023-33734

BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php...

CVE-2023-33734

BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php...

Sql injection

BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php...

CVE-2023-33734

BlueCMS v1.6 is affected by a SQL injection in the search.php keywords parameter. The root cause is unsafe handling of the keywords input in the SQL query, enabling remote exploitation without user interaction (CVSSv3.1: 9.8, Critical, Network). Exploitation details beyond what is in the document...

CVE-2023-33734

BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php...

Moodle LMS 4.0 - Cross-Site Scripting (XSS)

Exploit Title: Moodle LMS 4.0 - Cross-Site Scripting XSS Date: 26/10/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://moodle.org/ Software Link: https://git.in.moodle.com/moodle Version: 4.0 Tested on: XAMPP, Windows 10 Contact: https://twitter.com/dmaral3noz Description: A Cross Site...

WebTareas 2.4 - Reflected XSS (Unauthorised) Vulnerability

Exploit Title: WebTareas 2.4 - Reflected XSS Unauthorised Exploit Author: Hubert Wojciechowski Contact Author: email protected Vendor Homepage: https://sourceforge.net/projects/webtareas/ Software Link: https://sourceforge.net/projects/webtareas/ Version: 2.4 Tested on: Windows 10 using XAMPP,...

CVE-2023-27213

CVE-2023-27213 affects Online Student Management System v1.0. The vulnerability is a SQL injection in the searchdata parameter of /eduauth/student/search.php, enabling unauthorized access to data due to improper input handling. The CVSS indicates high impact (Confidentiality/Integrity/Availabilit...

CVE-2022-48120

SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd on March 13, 2021, allows attackers to execute arbitrary commands via the contact and doctor parameters to /search.php...

CVE-2022-48120

CVE-2022-48120 concerns a SQL Injection flaw in kishan0725 Hospital Management System. The vulnerability is triggered in /search.php via the contact and doctor parameters, allowing an attacker to execute arbitrary commands. Root cause is a lack of input validation/parameterization in the affected...

CVE-2007-10001

A vulnerability classified as problematic has been found in web-cyradm. This affects an unknown part of the file search.php. The manipulation of the argument searchstring leads to sql injection. It is recommended to apply a patch to fix this issue. The identifier VDB-217449 was assigned to this...

Sql injection

A vulnerability classified as problematic has been found in web-cyradm. This affects an unknown part of the file search.php. The manipulation of the argument searchstring leads to sql injection. It is recommended to apply a patch to fix this issue. The identifier VDB-217449 was assigned to this...

CVE-2007-10001 web-cyradm search.php sql injection

A vulnerability classified as problematic has been found in web-cyradm. This affects an unknown part of the file search.php. The manipulation of the argument searchstring leads to sql injection. It is recommended to apply a patch to fix this issue. The identifier VDB-217449 was assigned to this...

CVE-2007-10001

CVE-2007-10001 is associated with web-cyradm. Connected sources confirm a SQL injection vulnerability in an unknown part of search.php caused by unsafely handling the searchstring parameter. The issue affects web-cyradm and is mitigated by applying a patch (as noted in multiple references). Pract...

CVE-2007-10001 web-cyradm search.php sql injection

A vulnerability classified as problematic has been found in web-cyradm. This affects an unknown part of the file search.php. The manipulation of the argument searchstring leads to sql injection. It is recommended to apply a patch to fix this issue. The identifier VDB-217449 was assigned to this...

web-cyradm SQL注入漏洞

web-cyradm is web-cyradm open source a web-based software. web-cyradm has a SQL injection vulnerability that stems from a problem in the unknown section of the file search.php, where manipulation of the parameter searchstring can lead to sql injection...

PT-2023-9860 · Unknown · Web-Cyradm

Name of the Vulnerable Software and Affected Versions: web-cyradm affected versions not specified Description: A problematic issue has been found in web-cyradm, affecting the file search.php. The manipulation of the searchstring argument leads to sql injection. Recommendations: Apply a patch to f...