265 matches found
Wuzhi WUZHI CMS SQL注入漏洞
WUZHI CMS Five Fingers CMS is a high-performance open source content management system that supports LNAMP architecture, suitable for portals, enterprise websites, mobile sites, microsoft promotion. Attackers can use the keywords parameter in coreframe/app/promote/admin/index.php vulnerability fo...
CVE-2021-40669: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/index.php file...
Wuzhi WUZHI CMS SQL注入漏洞
WUZHI CMS Five Fingers CMS is a high-performance open source content management system that supports the LNAMP architecture, suitable for portals, corporate websites, mobile sites, microsoft promotion. WUZHI CMS version 4.1.0 has a SQL injection vulnerability. The attacker can use the keywords...
CVE-2021-35463
Cross-site scripting XSS vulnerability in the Frontend Taglib module in Liferay Portal 7.4.0 allows remote attackers to inject arbitrary web script or HTML into the management toolbar search via the keywords parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in the Frontend Taglib module in Liferay Portal 7.4.0 allows remote attackers to inject arbitrary web script or HTML into the management toolbar search via the keywords parameter...
CVE-2021-35463
The CVE-2021-35463 XSS exists in the Frontend Taglib module of Liferay Portal, affecting 7.4.0 (and 7.4.1 per Red Hat) with remote injection of scripts/HTML into the management toolbar search via the keywords parameter. The issue is caused by an incomplete fix (linked to CVE-2021-35463) and is di...
CVE-2021-35463: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Frontend Taglib module in Liferay Portal 7.4.0 allows remote attackers to inject arbitrary web script or HTML into the management toolbar search via the keywords parameter...
CVE-2021-24235
The Goto WordPress theme before 2.0 does not sanitise the keywords and startdate GET parameter on its Tour List page, leading to an unauthenticated reflected Cross-Site Scripting issue...
CVE-2020-28091
cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parameter via search.php...
CVE-2020-28091: Improper Neutralization of Special Elements used in an SQL Command
cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parameter via search.php...
Mail.ru: Reflected XSS in "keywords" parameter at "https://sbermarket.ru/metro/search"
Reflected XSS via GET parameter in sbermarket.ru...
CVE-2019-14976
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter...
CVE-2019-14976
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter...
Design/Logic Flaw
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter...
CVE-2019-14976
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter...
CVE-2019-14976: Improper Neutralization of Input During Web Page Generation
iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter...
CVE-2019-8390
qdPM 9.1 suffers from Cross-site Scripting XSS in the searchkeywords parameter...
CVE-2019-8390: Improper Neutralization of Input During Web Page Generation
qdPM 9.1 suffers from Cross-site Scripting XSS in the searchkeywords parameter...
CVE-2018-17420
An issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article management search box via the keywords parameter...
CVE-2018-17420: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article management search box via the keywords parameter...