EUVD-2021-22057

Malware in sbrugna...

EUVD-2009-5068

Malware in sbrugna...

CVE-2021-35414

Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php...

CVE-2021-35414

Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php...

CVE-2021-35414

CVE-2021-35414 (Chamilo LMS) affects Chamilo LMS v1.11.x via a SQL injection in the file path main/plagiarism/compilatio/upload.php, exploited through the doc parameter. The vulnerability originates from an unsafely handled parameter leading to a SQL injection vulnerability in a module related to...

CVE-2021-35414

Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php...

CVE-2021-35414: Improper Neutralization of Special Elements used in an SQL Command

Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php...

LiteCart 1.3.2 Cross Site Scripting Vulnerability

LiteCart version 1.3.2 suffers from a cross site scripting vulnerability. 1. Introduction Affected Product: LiteCart 1.3.2 Fixed in: 1.3.3 Fixed Version Link: https://www.litecart.net/downloading?version=1.3.3.1 Vendor Contact: email protected Vulnerability Type: XSS Remote Exploitable: Yes...

Cross site scripting

Cross-site scripting XSS vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the DOC parameter...

Directory traversal

Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the DOC parameter...

CVE-2009-5113

Cross-site scripting XSS vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the DOC parameter...

CVE-2009-5114: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the DOC parameter...

CVE-2009-5113: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the DOC parameter...

CVE-2008-4632

Multiple directory traversal vulnerabilities in index.php in Kure 0.6.3, when magicquotesgpc is disabled, allow remote attackers to read and possibly execute arbitrary local files via a .. dot dot in the 1 post and 2 doc parameters...

Kure 0.6.3 (index.php post,doc) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== Kure 0.6.3 index.php post,doc Local File Inclusion Vulnerability ================================================================== Kure 0.6.3 index.php post,doc Local File...

CVE-2006-5571: Undefined Security Weakness

Stack-based buffer overflow in /scripts/cruise/cws.exe in CruiseWorks 1.09c and 1.09d allows remote attackers to execute arbitrary code via a long string in the doc parameter...

CVE-2005-2333

Cross-site scripting XSS vulnerability in smiliespopup.php in SEO-Board 1.0 allows remote attackers to inject arbitrary web script or HTML via the doc parameter...

CVE-2005-2333: Undefined Security Weakness

Cross-site scripting XSS vulnerability in smiliespopup.php in SEO-Board 1.0 allows remote attackers to inject arbitrary web script or HTML via the doc parameter...

CVE-2004-1403: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in GNUBoard 3.39 and earlier allows remote attackers to execute arbitrary PHP code by modifying the doc parameter to reference a URL on a remote web server that contains the code...