Sql injection

SQL Injection exists in the Solidres 2.5.1 component for Joomla! via the direction parameter in a hub.search action...

CVE-2017-5877

XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /about-us/locations/index direction parameter...