255 matches found
CVE-2025-55307
An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. Opening a malicious PDF containing a crafted JavaScript call to search.query with a crafted cDIPath parameter e.g., "/" may cause an out-of-bounds read in internal path-parsing logic, potentially leadi...
PT-2025-47075
Name of the Vulnerable Software and Affected Versions Code-Projects Student Information System version 2.0 Description A flaw exists in Code-Projects Student Information System 2.0 related to SQL injection. The issue is located in the /searchquery.php file, where manipulation of the s argument ca...
Code-Projects Student Information System SQL注入漏洞
Student Information System is a student information system. The Student Information System suffers from a SQL injection vulnerability that originates from the parameter s in the /searchquery.php file that does not effectively filter user input. An attacker can exploit this vulnerability by...
DokuWiki <= 2025-05-14a XSS Vulnerability
DokuWiki is prone to reflected cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
EUVD-2018-10807
Malware in sbrugna...
EUVD-2008-1087
Malware in sbrugna...
EUVD-2008-2392
Malware in sbrugna...
EUVD-2015-0184
Malware in sbrugna...
EUVD-2019-6538
Malware in sbrugna...
EUVD-2005-4491
Malware in sbrugna...
EUVD-2021-11927
Malware in sbrugna...
EUVD-2009-1466
Malware in sbrugna...
The vulnerability of the Search.cgi?action=cgi_query component of the Avtech digital video recorder software allows a hacker to execute arbitrary code.
The vulnerability of the Search.cgi?action=cgiquery component of the Avtech digital video recorder software lies in insufficient validation of input data when processing parameters such as username or queryb64str. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
CVE-2025-7385: Improper Neutralization of Special Elements used in an SQL Command
Input from search query parameter in GOV CMS is not sanitized properly, leading to a Blind SQL injection vulnerability, which might be exploited by an unauthenticated remote attacker. Versions 4.0 and above are not affected...
CVE-2025-50690
A Cross-Site Scripting XSS vulnerability exists in SpatialReference.org OSGeo/spatialreference.org versions prior to 2025-05-17 commit 2120adfa17ddd535bd0f539e6c4988fa3a2cb491. The vulnerability is caused by improper handling of user input in the search query parameter. An attacker can craft a...
CVE-2025-50690: Improper Neutralization of Input During Web Page Generation
A Cross-Site Scripting XSS vulnerability exists in SpatialReference.org OSGeo/spatialreference.org versions prior to 2025-05-17 commit 2120adfa17ddd535bd0f539e6c4988fa3a2cb491. The vulnerability is caused by improper handling of user input in the search query parameter. An attacker can craft a...
SpatialReference.org 安全漏洞
SpatialReference.org is an online resource platform organized by SpatialReference. A security vulnerability exists in versions of SpatialReference.org prior to 2025-05-17, which stems from mishandling of search query parameter inputs and could lead to a cross-site scripting attack...
CVE-2019-13646
Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query. NOTE: It is asserted that an attacker must have the same access rights as the user in order to be able to execute the vulnerability...