The vulnerability of the CInArchive::ReadFileItem method (Archive/Udf/UdfIn.cpp) in the p7zip archive tool allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the CInArchive::ReadFileItem method Archive/Udf/UdfIn.cpp in the p7zip archive tool is caused by the occurrence of read operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary...

Google Android LG Bootloader Component Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.LG Bootloader is one of the bootloaders. A local boost vulnerability exists in DisplayFtmItem of LG Bootloader in Android, which stems from the program reading a string without...

CVE-2017-12811

PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...

CVE-2017-12811

PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...

CVE-2017-12811

PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...

CVE-2017-12811

PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...

PT-2017-12704

Name of the Vulnerable Software and Affected Versions PHPJabbers Star Rating Script version 4.0 Description The issue is related to stored XSS, which occurs via a rating item. This allows for the potential execution of malicious scripts. Recommendations For PHPJabbers Star Rating Script version...

CVE-2017-12811: Improper Neutralization of Input During Web Page Generation

PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...

WordPress Payment Form for PayPal Pro Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Payment Form for PayPal Pro plugin is used in one of the payment plugin. WordPress Payment Form for PayPal Pro...

FS Groupon Clone SQL Injection Vulnerability

FS Groupon Clone is a set of PHP and MySQL based online transaction website scripts. The script supports a wide range of online transactions such as event bookings, travel bookings, merchandise purchases and community services. A SQL injection vulnerability exists in FS Groupon Clone version 1.0....

FS Trademe Clone SQL Injection Vulnerability

FS Trademe Clone is a set of versatile website creation scripts based on PHP and MySQL. The script supports the creation of websites in categories such as auctions, e-commerce, B2B, real estate, job portals and classified ads. A SQL injection vulnerability exists in FS Trademe Clone version 1.0. ...

CVE-2017-17575

FS Groupon Clone 1.0 has SQL Injection via the itemdetails.php id parameter or the vendordetails.php id parameter...

CVE-2017-17577

FS Trademe Clone 1.0 has SQL Injection via the searchitem.php search parameter or the generalitemdetails.php id parameter...

Sql injection

FS Trademe Clone 1.0 has SQL Injection via the searchitem.php search parameter or the generalitemdetails.php id parameter...

CVE-2017-17575

FS Groupon Clone 1.0 is affected by a SQL Injection vulnerability in the item_details.php?id parameter and the vendor_details.php?id parameter. The condition is tied to a PHP‑MySQL stack, enabling potentially unauthorized data access through crafted input. Exploit references exist (Exploit-DB: 43...

PT-2017-14872

Name of the Vulnerable Software and Affected Versions FS Trademe Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the search item.php search parameter or the general item details.php id parameter. Recommendations For FS Trademe Clone version 1.0, consider...

PT-2017-14870

Name of the Vulnerable Software and Affected Versions FS Groupon Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the id parameter in the "item details.php" or "vendor details.php" API endpoints. Recommendations For FS Groupon Clone version 1.0, avoid usi...

FS Trademe Clone 1.0 SQL Injection

Exploit Title: FS Trademe Clone 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/trademe-clone/ Demo: http://trademe-clone.demonstration.co.in/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx...

Cross-site Scripting (XSS)

nilsteampassnet/teampass is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary webscript through the URL value of item object or the log history of a user...

Multiple Cross-Site Scripting Vulnerabilities in TeamPass

TeamPass is a dedicated password manager for Apache, MySQL and PHP. Multiple cross-site scripting vulnerabilities exist in versions of TeamPass prior to 2.1.27.9. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of an item's URL value or user l...