13433 matches found
PT-2023-15549
Name of the Vulnerable Software and Affected Versions Opencats version 0.9.7 Description A reflected cross-site scripting XSS issue was found in Opencats via the component "/opencats/index.php?m=settings&a=ajax tags upd". This allows for potential XSS attacks. Recommendations For Opencats version...
CVE-2022-48012
Opencats v0.9.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /opencats/index.php?m=settings&a=ajaxtagsupd...
CVE-2022-46968: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in /index.php?page=help of Revenue Collection System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into sent messages...
PT-2023-15123
Name of the Vulnerable Software and Affected Versions Revenue Collection System version 1.0 Description A stored cross-site scripting issue exists, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into sent messages, specifically in the /index.php?page=he...
CVE-2022-48012: Improper Neutralization of Input During Web Page Generation
Opencats v0.9.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /opencats/index.php?m=settings&a=ajaxtagsupd...
CVE-2022-48013
Opencats v0.9.7 was discovered to contain a stored cross-site scripting XSS vulnerability in the component /opencats/index.php?m=calendar. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description or Title text fields...
Cross-Site Scripting (XSS)
phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to improper sanitization of user inputs in index.php which allows an attacker to inject and execute arbitrary JavaScript...
Inout Search Engine 10.1.3 Cross Site Scripting
┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...
CVE-2023-23024: Improper Neutralization of Input During Web Page Generation
Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the writer parameter...
CVE-2022-47740
Seltmann GmbH Content Management System 6 is vulnerable to SQL Injection via /index.php...
CVE-2022-47740
Seltmann GmbH Content Management System 6 is vulnerable to SQL Injection via /index.php...
Sql injection
Seltmann GmbH Content Management System 6 is vulnerable to SQL Injection via /index.php...
CVE-2015-10070
A vulnerability was found in copperwall Twiddit. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation leads to sql injection. The identifier of the patch is 2203d4ce9810bdaccece5c48ff4888658a01acfc. It is recommended to apply a patch to...
CVE-2015-10070
CVE-2015-10070 affects copperwall Twiddit. A vulnerability in the processing of the file index.php allows SQL injection. The issue is rated critical (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). A patch is identified by the commit 2203d4ce9810bdaccece5c48ff4888658a01acfc and is recommended as...
CVE-2015-10070 copperwall Twiddit index.php sql injection
A vulnerability was found in copperwall Twiddit. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation leads to sql injection. The identifier of the patch is 2203d4ce9810bdaccece5c48ff4888658a01acfc. It is recommended to apply a patch to...
copperwall Twiddit SQL注入漏洞
Twiddit is a web application by copperwall individual developers. A SQL injection vulnerability exists in copperwall Twiddit, which stems from a vulnerability found in copperwall Twiddit that affects some unknown processing of the file index.php, an operation that results in sql injection...
CVE-2022-47740: Improper Neutralization of Special Elements used in an SQL Command
Seltmann GmbH Content Management System 6 is vulnerable to SQL Injection via /index.php...
CVE-2015-10070: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in copperwall Twiddit. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation leads to sql injection. The identifier of the patch is 2203d4ce9810bdaccece5c48ff4888658a01acfc. It is recommended to apply a patch to...
Seltmann GmbH Content Management System 6 SQL注入漏洞
seltmann Seltmann GmbH Content Management System is a content management system from seltmann. A security vulnerability exists in Seltmann GmbH Content Management System 6. An attacker could exploit this vulnerability to perform SQL injection via /index.php...