7215 matches found
Sentrifugo CMS 3.2 - Persistent Cross-Site Scripting
Exploit Title: Sentrifugo CMS 3.2 - Persistent Cross-Site Scripting Dork: N/A Date: 2020-05-06 Exploit Author: Vulnerability-Lab Vendor: http://www.sentrifugo.com/ Link: http://www.sentrifugo.com/download Version: 3.2 Category: Webapps CVE: N/A Document Title: =============== Sentrifugo v3.2 CMS ...
Cross-site Scripting (XSS)
forkcms/forkcms is vulnerable to cross-site scripting XSS attacks. The library doesn't properly escape user input displayname value in the function loadDataGrid in Index.php allowing a malicious user to inject and execute malicious web script...
CVE-2020-11712
CVE-2020-11712 affects the Open Upload project (PHP-based file upload app) up to version 0.4.3. The issue is a Cross-Site Scripting (XSS) vulnerability exploitable via index.php?action=u and the filename field. The available sources state the vulnerability and affected version but do not provide ...
fcnetwork.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1123653 Security Researcher securaji Helped patch 77 vulnerabilities Received 3 Coordinated Disclosure badges Received 4 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting fcnetwork.com website and it...
Joomla! com_hdwplayer 4.2 - search.php SQL Injection
Joomla! comhdwplayer 4.2 - search.php SQL Injection Exploit Title: Joomla! comhdwplayer 4.2 - 'search.php' SQL Injection Dork: inurl:"index.php?option=comhdwplayer" Date: 2020-03-23 Exploit Author: qw3rTyTy Vendor Homepage: https://www.hdwplayer.com/ Software Link:...
CVE-2019-20524
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter...
CVE-2019-20524
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter...
CVE-2019-20523
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter...
Cross site scripting
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter...
Cross site scripting
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter...
CVE-2019-20522
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter...
CVE-2019-20522
CVE-2019-20522 affects ilchCMS 2.1.23 and enables Cross-Site Scripting via the index.php/partner/index Link parameter. The connected sources consistently describe a client-side script execution vulnerability in ilchCMS, with no details provided on affected versions beyond 2.1.23 in public CVE rec...
CVE-2019-20523
ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter...
CVE-2019-20523
CVE-2019-20523 affects ilchCMS 2.1.23, where an XSS vulnerability exists in the index.php/partner/index Name parameter. The issue allows injection of script into client-side context, as described in public sources. The NVD entry lists an overall impact of low to partial integrity impact (I:L) wit...
CVE-2019-20524
CVE-2019-20524 affects ilchCMS 2.1.23 and allows cross-site scripting via the Banner parameter in index.php/partner/index. The root cause is a reflected XSS vector that exposes client-side code execution opportunities when a banner parameter is manipulated, as described across multiple sources (e...
CVE-2020-10218
The CVE-2020-10218 entry pertains to Sapplica Sentrifugo 3.2, where a Blind SQL Injection vulnerability exists in the index.php/holidaygroups/add id parameter caused by the HolidaydatesController.php addAction function. The issue allows an attacker to read data from the application’s database. Pu...
CVE-2020-10415
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/index.php by adding a question mark ? followed by the payload...
CVE-2020-10415
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/index.php by adding a question mark ? followed by the payload...
Joomla! Component com_newsfeeds 1.0 - 'feedid' SQL Injection
Exploit Title: Joomla! Component comnewsfeeds 1.0 - 'feedid' SQL Injection Date: 2020-03-10 Author: Milad Karimi Software Link: Version: Category : webapps Tested on: windows 10 , firefox CVE : CWE-89 Dork: inurl:index.php?option=comnewsfeeds...