PT-2017-15081

Name of the Vulnerable Software and Affected Versions Readymade Job Site Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. The /job URI is affected, specifically through the keyword parameter. Recommendations...

CVE-2017-17642

Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...

CVE-2017-17642

Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...

CVE-2017-17623

Opensource Classified Ads Script 3.2 has SQL Injection via the advanceresult.php keyword parameter...

Sql injection

Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...

CVE-2017-17623

Opensource Classified Ads Script 3.2 has SQL Injection via the advanceresult.php keyword parameter...

CVE-2017-17642

Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...

CVE-2017-17623

Opensource Classified Ads Script 3.2 is affected by a SQL Injection via the keyword parameter in advance_result.php. Multiple sources (NVD/CVE listings and CNVD/CVE records) confirm an injectable vulnerability in this version, with CVSS scores indicating HIGH/CRITICAL severity (NVD CVSS2: 7.5 HIG...

CVE-2017-17642: Improper Neutralization of Special Elements used in an SQL Command

Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...

CVE-2017-17623: Improper Neutralization of Special Elements used in an SQL Command

Opensource Classified Ads Script 3.2 has SQL Injection via the advanceresult.php keyword parameter...

CVE-2017-16955

SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows authenticated users to execute arbitrary SQL commands via the "keyword" parameter to /wp-admin/options-general.php?page=inlinks/inlinks.php...

CVE-2017-16955

SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows authenticated users to execute arbitrary SQL commands via the "keyword" parameter to /wp-admin/options-general.php?page=inlinks/inlinks.php...

PT-2017-14657

Name of the Vulnerable Software and Affected Versions InLinks plugin versions through 1.1 for WordPress Description The issue allows authenticated users to execute arbitrary SQL commands. This is achieved via the "keyword" parameter to the "/wp-admin/options-general.php?page=inlinks/inlinks.php"...

CVE-2017-16955: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows authenticated users to execute arbitrary SQL commands via the "keyword" parameter to /wp-admin/options-general.php?page=inlinks/inlinks.php...

NexusPHP Cross-Site Scripting Vulnerability (CNVD-2017-32401)

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A cross-site scripting vulnerability exists in NexusPHP version 1.5. A remote attacker can exploit this vulnerability by sending the 'keyword' parameter to the messages.php file to obtain the...

CVE-2017-15305

XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php...

Cross site scripting

XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php...

CVE-2017-15305

XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php...

CVE-2017-15305: Improper Neutralization of Input During Web Page Generation

XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php...

CVE-2017-12856

Cross-site scripting XSS vulnerability in C.P.Sub 5.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to index.php...