CVE-2024-57494

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...

CVE-2024-57494

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...

Neto E-Commerce CMS 安全漏洞

Neto E-Commerce CMS is an e-commerce content management system from Neto Australia. A security vulnerability exists in Neto E-Commerce CMS versions 6.313.0 through 6.3115, which stems from the presence of cross-site scripting in the kw parameter, which could lead to elevation of privilege...

CVE-2024-57494: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...

CVE-2024-57494

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...

CVE-2024-57494

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...

PT-2018-13526

Name of the Vulnerable Software and Affected Versions IdeaCMS versions through 2016-04-30 Description The issue is related to a reflected XSS that can be exploited via the kw parameter in the "index.php?c=content&a=search" endpoint. The product is discontinued. Recommendations For IdeaCMS version...

CVE-2008-2915: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in jobseekers/JobSearch.php aka the search module in Pre Job Board allow remote attackers to execute arbitrary SQL commands via the 1 position or 2 kw parameter...

CVE-2006-5635: Undefined Security Weakness

SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW parameter...

CVE-2006-5635

CVE-2006-5635 is a SQL injection vulnerability affecting Web Wiz Forums, specifically in forum/search.asp where the KW parameter is not properly sanitized. The available connected documents confirm the issue allows remote attackers to manipulate the underlying database and potentially execute arb...

CVE-2006-5532: Undefined Security Weakness

Cross-site scripting XSS vulnerability in rmgs/images.php in RMSOFT Gallery System 2.0 allows remote attackers to inject arbitrary web script or HTML via the kw parameter. NOTE: some of these details are obtained from third party information...