CVE-2017-12138: URL Redirection to Untrusted Site

XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter...

CVE-2017-11744

In MODX Revolution 2.5.7, the "key" and "name" parameters in the System Settings module are vulnerable to XSS. A malicious payload sent to connectors/index.php will be triggered by every user, when they visit this module...

CVE-2017-11744

In MODX Revolution 2.5.7, the "key" and "name" parameters in the System Settings module are vulnerable to XSS. A malicious payload sent to connectors/index.php will be triggered by every user, when they visit this module...

PT-2017-12219

Name of the Vulnerable Software and Affected Versions MODX Revolution version 2.5.7 Description The issue concerns the System Settings module, where the key and name parameters are susceptible to XSS attacks. When a malicious payload is sent to the "connectors/index.php" endpoint, it will be...

CVE-2017-11744: Improper Neutralization of Input During Web Page Generation

In MODX Revolution 2.5.7, the "key" and "name" parameters in the System Settings module are vulnerable to XSS. A malicious payload sent to connectors/index.php will be triggered by every user, when they visit this module...

Friends In War Make Or Break 1.7 SQL Injection

Exploit Title: Friends in War Make or Break 1.7 SQL Injection Dork: N/A Date: 26.07.2017 Vendor : http://software.friendsinwar.com/ Software: http://software.friendsinwar.com/downloads.php?catid=2&fileid=9 Demo: http://localhost/PATH/ Version: 1.7 Author: Ihsan Sencan SQL Injection/Exploit :...

Access Restriction Bypass

Moodle is vulnerable to access restriction bypass. The attacks exist because mod/chat/guisockets/index.php does not check for privileges for access to a daemon-mode Chat activity, allowing a malicious user unauthorized access to daemon-mode Chat activity...

qcmd.org XSS vulnerability

Vulnerable URL: http://www.qcmd.org/index.php/index.php?pageId=3=EN Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2056429 VIP website status:| No Check qcmd.org SSL connection:|...

hqcompany.com XSS vulnerability

Vulnerable URL: http://www.hqcompany.com/index.php?theme=7=1"...

safetyhow.com XSS vulnerability

Vulnerable URL: http://www.safetyhow.com/index.php/QualificationRequirementsForPollutionControlOfficerInThePhilippines?action=1"...

goolink.org XSS vulnerability

Vulnerable URL: http://www.goolink.org/index.php?mess=1"...

infob.de XSS vulnerability

Vulnerable URL: https://www.infob.de/index.php?go=on=1"...

Cross site scripting

In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS...

CVE-2017-10667: Improper Neutralization of Input During Web Page Generation

In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS...

CVE-2017-10667

In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS...

PT-2017-11420

Name of the Vulnerable Software and Affected Versions Zen Cart version 1.6.0 Description The issue is related to a potential XSS problem. In the index.php file, the products id parameter can cause XSS. Recommendations For Zen Cart version 1.6.0, avoid using the products id parameter in the affect...

members.peoplefu.com XSS vulnerability

Vulnerable URL: http://members.peoplefu.com/index.php?word=1/-///'/"//--...

Sql injection

SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account...

CVE-2017-9759

The vulnerability is a SQL Injection in the open-source CMS Zenbership version 1.0.8, located in the admin/index.php handling the filters array parameter. The issue is exploitable by a privileged account, as described in CVE-2017-9759. The connected sources consistently report this exact flaw but...

CVE-2017-9759: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account...