1687 matches found
Joomla com_hdwplayer 4.2 - (search.php) SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! comhdwplayer 4.2 - 'search.php' SQL Injection Dork: inurl:"index.php?option=comhdwplayer" Exploit Author: qw3rTyTy Vendor Homepage: https://www.hdwplayer.com/ Software Link: https://www.hdwplayer.com/download/ Version: 4...
CVE-2020-10449
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/report-search.php by adding a question mark ? followed by the payload...
Cross site scripting
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/report-search.php by adding a question mark ? followed by the payload...
CVE-2020-10449
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/report-search.php by adding a question mark ? followed by the payload...
CVE-2012-1124
SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL commands via the searchterms parameter...
Sql injection
SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL commands via the searchterms parameter...
CVE-2012-1124
The CVE-2012-1124 entry concerns a SQL injection vulnerability in the search.php component of phxEventManager 2.0 beta 5, where user-supplied search_terms can be exploited to execute arbitrary SQL commands. According to the connected NVD entry, the flaw enables remote attackers to target the appl...
CVE-2012-1124
SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL commands via the searchterms parameter...
CVE-2017-18364
phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter...
CVE-2017-18364
CVE-2017-18364 concerns phpFK lite and is a reflected cross-site scripting (XSS) vulnerability. The affected components are the web interface files faq.php, members.php, search.php (via query strings) and user.php (via the user parameter). The underlying issue is that user-supplied input in these...
LayerBB SQL Injection Vulnerability
LayerBB is a small set of forum software. A SQL injection vulnerability exists in LayerBB version 1.1.1. A remote attacker can exploit this vulnerability by sending the 'searchquery' parameter to the search.php file to execute SQL commands...
CVE-2018-17988
LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...
CVE-2018-17988
LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...
Sql injection
LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...
CVE-2018-17988
LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...
CVE-2018-17988
LayerBB is affected: versions 1.1.1 and 1.1.3 expose an SQL Injection in the search.phpFile through the search_query parameter. The root cause is an injectable parameter in the search functionality, allowing an attacker to manipulate SQL commands. The CVE entry (CVE-2018-17988) lists this as a hi...
CMSsite 1.0 - search SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: CMSsite 1.0 - 'search' SQL injection Exploit Author : Majid kalantari email protected Vendor Homepage : https://github.com/VictorAlagwu/CMSsite Software link: https://github.com/VictorAlagwu/CMSsite/archive/master.zip Version: 1...
CVE-2018-19331
An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...