202 matches found
CVE-2019-8390
qdPM 9.1 suffers from Cross-site Scripting XSS in the searchkeywords parameter...
CVE-2018-17420
An issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article management search box via the keywords parameter...
razorCMS HTML Injection Vulnerability (CNVD-2019-00806)
razorCMS is an open source content management system written in PHP, which stores all data in flat files, so there is no need to install a database. An injection vulnerability exists in razorCMS version 3.4.8. An attacker can use the 'keywords' parameter of the //page page to inject arbitrary HTM...
CVE-2018-19905
HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...
CVE-2018-19905
HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...
Cross site scripting
HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...
CVE-2018-19905
HTML injection exists in razorCMS 3.4.8 via the //page keywords parameter...
PT-2018-15155 · Razorcms · Razorcms
Name of the Vulnerable Software and Affected Versions: razorCMS version 3.4.8 Description: The issue is related to HTML injection in the software. It can be exploited via the "//page" API endpoint, specifically through the keywords parameter. Recommendations: For razorCMS version 3.4.8, consider...
CVE-2018-15679
An issue was discovered in BTITeam XBTIT 2.5.4. The "keywords" parameter in the search function available at /index.php?page=forums&action=search is vulnerable to reflected cross-site scripting...
WUZHI CMS SQL Injection Vulnerability (CNVD-2018-18141)
WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A SQL injection vulnerability exists in the /coreframe/app/admin/copyfrom.php file in WUZHI CMS version 4.1.0. A remote attacker can exploit this vulnerability by...
WUZHI CMS SQL Injection Vulnerability (CNVD-2018-14091)
WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A SQL injection vulnerability exists in WUZHI CMS version 4.1.0. A remote attacker can inject malicious SQL statements by sending the 'keywords' parameter to the...
WUZHI CMS SQL Injection Vulnerability (CNVD-2018-15403)
WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system. WUZHI CMS 4.1.0 version of the coreframe/app/order/admin/goods.php file there is a SQL injection vulnerability, the vulnerability stems from the program does not filte...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-08556)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit the...
iCMS Cross-Site Scripting Vulnerability (CNVD-2018-08925)
iCMS is a content management system CMS built with PHP and MySQL databases. A cross-site scripting vulnerability exists in iCMS version 7.0.8. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of the 'keywords' parameter...
CVE-2018-10250
iCMS V7.0.8 has XSS via the admincp.php keywords parameter in a weixincategory action, aka a WeChat Classified Management keyword search...
PSNews Website 1.0.0 - Keywords SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: PSNews Website Same Backend with Mobile Apps 1.0.0 - 'Keywords' SQL Injection Dork: N/A Date: 2018-02-16 Exploit Author: Borna nematzadeh L0RD or email protected Vendor Homepage:...
Classified Ads CMS Quickad SQL Injection Vulnerability
Classified Ads CMS Quickad is a set of PHP based advertising website scripts. A SQL injection vulnerability exists in Classified Ads CMS Quickad version 4.0. A remote attacker can exploit this vulnerability by sending the 'keywords', 'placeid', 'cat', or 'subcat' parameters to the listing URI to...
CVE-2018-5972
SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI...