CVE-2026-87793

The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser via a crafted URL containing a malicious archive parameter...

CVE-2026-87793 Reflected XSS in WordPress theme design-scuole-wordpress-theme

The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser via a crafted URL containing a malicious archive parameter...

CVE-2026-87793

The "Design Scuole Italia" WordPress theme (versions 1.0–2.18.2 ) contains a Reflected Cross-Site Scripting (XSS) vulnerability in the filters-scheda-didattica.php file. An unauthenticated attacker can execute arbitrary JavaScript in a victim's browser by supplying a malicious value in the archiv...

EUVD-2026-78666

The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser via a crafted URL containing a malicious archive parameter...

CVE-2026-87793 Reflected XSS in WordPress theme design-scuole-wordpress-theme

The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser via a crafted URL containing a malicious archive parameter...

PT-2026-92112

The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser via a crafted URL containing a malicious archive parameter...

CVE-2026-87793: Improper Neutralization of Input During Web Page Generation

The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser via a crafted URL containing a malicious archive parameter...

EUVD-2026-18262

Endian Firewall version 3.3.25 and prior allow authenticated users to delete arbitrary files via directory traversal in the remove ARCHIVE parameter to /cgi-bin/backup.cgi. The remove ARCHIVE parameter value is used to construct a file path without sanitization of directory traversal sequences,...

CVE-2026-34790

Endian Firewall version 3.3.25 and prior allow authenticated users to delete arbitrary files via directory traversal in the remove ARCHIVE parameter to /cgi-bin/backup.cgi. The remove ARCHIVE parameter value is used to construct a file path without sanitization of directory traversal sequences,...

PT-2026-29750

Endian Firewall version 3.3.25 and prior allow authenticated users to delete arbitrary files via directory traversal in the remove ARCHIVE parameter to /cgi-bin/backup.cgi. The remove ARCHIVE parameter value is used to construct a file path without sanitization of directory traversal sequences,...

EUVD-2007-5405

Malware in sbrugna...

PT-2023-12416 · Unknown · Th3-822 Rapidleech

Name of the Vulnerable Software and Affected Versions: Th3-822 Rapidleech affected versions not specified Description: A problematic vulnerability has been found in Th3-822 Rapidleech, affecting the function zip go of the file classes/options/zip.php. The manipulation of the argument archive lead...

PrestaShop SQL注入漏洞

Prestashop is a set of open source e-commerce solutions from the United States Prestashop. The solution provides multiple payment methods, short message alerts, and product image zoom and other features. A SQL injection vulnerability exists in SmartDataSoft SmartBlog for PrestaShop versions prior...

CVE-2021-29009

A cross-site scripting XSS issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "type" parameter...

CVE-2007-5429

Cross-site scripting XSS vulnerability in index.php in Nucleus 3.01 allows remote attackers to inject arbitrary web script or HTML via the archive parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Nucleus 3.01 allows remote attackers to inject arbitrary web script or HTML via the archive parameter...

CVE-2007-5429

Cross-site scripting XSS vulnerability in index.php in Nucleus 3.01 allows remote attackers to inject arbitrary web script or HTML via the archive parameter...

CVE-2007-5429: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Nucleus 3.01 allows remote attackers to inject arbitrary web script or HTML via the archive parameter...

Vulnerability in Nucleus

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в Nucleus. XSS: Уязвимость на странице index.php в параметре archive. http://site/index.php?blogid=1&archive=2007-01-013Cscript3Ealertdocument.cookie3C/script3E Дополнительная информация о данной уязвимости у меня н...

CVE-2006-1823: Undefined Security Weakness

Directory traversal vulnerability in FarsiNews 2.5.3 Pro and earlier allows remote attackers to obtain the installation path via ".." sequences in the archive parameter to index.php, which leaks the full pathname in an error message...