195 matches found
PT-2022-26253 · Unknown · Online-Shopping-System-Advanced
Name of the Vulnerable Software and Affected Versions: Online-shopping-system-advanced version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the p parameter at the "/shopping/product.php" API endpoint. Recommendations: For...
PT-2022-13852
Name of the Vulnerable Software and Affected Versions Videos sync PDF WordPress plugin versions 1.7.4 and earlier Description The issue arises from the plugin not validating the p parameter before using it in an include statement, potentially leading to Local File Inclusion issues. Recommendation...
CVE-2022-1392: Improper Limitation of a Pathname to a Restricted Directory
The Videos sync PDF WordPress plugin through 1.7.4 does not validate the p parameter before using it in an include statement, which could lead to Local File Inclusion issues...
CVE-2021-43109
An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...
CVE-2021-43109
An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...
CVE-2021-43109: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...
PT-2022-11788
Name of the Vulnerable Software and Affected Versions PuneethReddyHC online-shopping-system affected versions not specified Description The issue is related to an SQL Injection vulnerability. It affects the PuneethReddyHC online-shopping-system as of 11/01/2021. The vulnerability is exploited via...
CVE-2019-19484
Open redirect via parameter ‘p’ in login.php in Centreon 19.04.4 and below allows an attacker to craft a payload and execute unintended behavior...
CVE-2020-10466: Improper Neutralization of Input During Web Page Generation
Reflected XSS in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p...
CVE-2020-10464: Improper Neutralization of Input During Web Page Generation
Reflected XSS in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p...
CVE-2020-10463: Improper Neutralization of Input During Web Page Generation
Reflected XSS in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p...
CVE-2020-10465: Improper Neutralization of Input During Web Page Generation
Reflected XSS in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p...
PT-2020-10061
Name of the Vulnerable Software and Affected Versions Hero Maps Premium plugin versions 2.2.1 and prior Description The issue is related to insufficient sanitization of user-supplied input, leading to unauthenticated XSS. An attacker can inject HTML or arbitrary JavaScript within the browser of a...
CVE-2019-19134: Improper Neutralization of Input During Web Page Generation
The Hero Maps Premium plugin 2.2.1 and prior for WordPress is prone to unauthenticated XSS via the views/dashboard/index.php p parameter because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to inject HTML or arbitrary JavaScript within the browser of ...
CVE-2011-1009
Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter...
CVE-2011-1009: Improper Neutralization of Input During Web Page Generation
Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter...
PT-2020-7089
Name of the Vulnerable Software and Affected Versions Vanilla Forums versions 2.0.17.1 through 2.0.17.5 Description The issue is related to a cross-site scripting XSS vulnerability. It affects the /vanilla/index.php endpoint via the p parameter. Recommendations For versions 2.0.17.1 through...
XooDigital - (p) SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: XooDigital - 'p' SQL Injection Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://xooscripts.com/product/digital-download-protection-script.html Demo Site: http://xooscripts.com/demos/xoodigital/ Version: Lastest Tested...
