7215 matches found
CVE-2017-5347
SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the recipient parameter to gxadmin/index.php...
bmstv.co.uk XSS vulnerability
Vulnerable URL: http://bmstv.co.uk/index.php?file=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check bmstv.co.uk SSL connection...
WordPress plugin wpcalendar suffers from a reflected cross-site scripting vulnerability
WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A reflective cross-site scripting vulnerability exists in the WordPress plugin wpcalendar 'index.php' page, as the program fails to effectively filter user-submitte...
CVE-2016-10038
Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to browser/directory/remove...
bikescale.com XSS vulnerability
Vulnerable URL: http://bikescale.com/index.php?d=artykul...
Docebo LMS v6.9 - (Clone Links) Persistent Vulnerability
Document Title: =============== Docebo LMS v6.9 - Clone Links Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1878 Release Date: ============= 2016-12-19 Vulnerability Laboratory ID VL-ID: ==================================== 187...
F3 designs Website SQL Injection Vulnerability
F3 designs is a custom website design and development framework. A SQL injection vulnerability exists in the lang parameter of the index.php page of F3 designs. Because the program fails to adequately filter user-submitted input, an attacker could use this vulnerability to compromise the...
Arbitrary file upload vulnerability in the $_FILES ['ttsFile'] and $_POST['taskid'] parameters of the Mixcall agent management system.
Mixcall seat management system is based on B/S architecture, the management personnel can directly log into the Mixcall seat management center through the computer, and view the detailed situation related to the seat personnel's voice services. An arbitrary file upload vulnerability exists in the...
PHP Support Tickets 1.3 Local File Inclusion
PHPSTicketsv1.3 File Inclusion Vulnerability ================================================ Discovered by NA, NAattutanota.com ======================================= Description ============ PHP Support Tickets; will allow a webmaster the ability to offer its user base a means to contact its...
Codoforum 3.4 Build 19 Cross Site Scripting
======================================================================== | Title : codoforum.v.3.4.build-19 XSS vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : 5.2.0 | Vendor : http://codoforum.com/ | Dork : Powered by...
gameworks.ch XSS vulnerability
Vulnerable URL: http://www.gameworks.ch/2010/index.php?m=10" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5619557 VIP website status:| No Check gameworks.ch SSL connection:| Grad...
pedagogie.ac-toulouse.fr XSS vulnerability
Vulnerable URL: http://pedagogie.ac-toulouse.fr/svt/serveur/bankact/index.php?m=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...
HandMade Connection CMS index.php parameter file arbitrary File Download vulnerability
No description provided by source...
Theindia index.php the Parameters page of the SQL blind injection vulnerability
No description provided by source...
laznia.pl XSS vulnerability
Vulnerable URL: http://www.laznia.pl/index.php?lang=en';...
mktx.az XSS vulnerability
Vulnerable URL: http://mktx.az/index.php?page=archivenews=5" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check mktx.az SSL...
valotte.free.fr XSS vulnerability
Vulnerable URL: http://valotte.free.fr/index.php?cat=race-curly" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5730211 VIP website status:| No Check valotte.free.fr SSL connection...
QuickerBB 0.7.0 - Register Cross Site Scripting Vulnerability
Document Title: =============== QuickerBB 0.7.0 - Register Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1895 Release Date: ============= 2016-08-10 Vulnerability Laboratory ID VL-ID:...
webinfo.fi XSS vulnerability
Vulnerable URL: http://www.webinfo.fi/index.php?keyword="=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 999823 VIP website status:| No Check webinfo.fi SSL connection:| Grade: F...