291 matches found
bookstore 跨站脚本漏洞
bookstore is an e-commerce bookstore system by donglight individual developer. A cross-site scripting vulnerability exists in bookstore version 1.0.0, which originates from the parameter keywords in the file src/main/java/org/zdd/bookstore/web/controller/BookInfoController.java that can lead to...
CVE-2024-11663
A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument keywords leads to sql injection. The attack can be launched remotely. The exploit has been disclose...
E-Commerce Site 注入漏洞
E-Commerce Site is an open source e-commerce site by Codezips. An injection vulnerability exists in E-Commerce Site version 1.0, which stems from an incorrect manipulation of the parameter keywords that can lead to sql injection...
Microweber Reflected Cross-site scripting (XSS) vulnerability
A Reflected Cross-site scripting XSS vulnerability exists in '/search' in microweber 2.0.15 and earlier allowing unauthenticated remote attackers to inject arbitrary web script or HTML via the 'keywords' parameter...
Microweber 2.0.15 Cross Site Scripting
Exploit Title: Microweber =v2.0.15 - Reflected Cross-Site Scripting XSS Date: 16.07.2024 Exploit Author: Prerak Mittal Vendor Homepage: https://microweber.org/ Software Link: https://github.com/microweber/microweber/releases/tag/v2.0.15 Version: =v2.0.15 Tested on: Ubuntu 22.04 CVE : CVE-2024-401...
CVE-2024-40101
A Reflected Cross-site scripting XSS vulnerability exists in '/search' in microweber 2.0.15 and earlier allowing unauthenticated remote attackers to inject arbitrary web script or HTML via the 'keywords' parameter...
PT-2024-28783 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber versions 2.0.15 and earlier Description: A Reflected Cross-site scripting XSS issue exists in the "/search" API endpoint, allowing unauthenticated remote attackers to inject arbitrary web script or HTML via the keywords parameter...
CVE-2024-40101
A Reflected Cross-site scripting XSS vulnerability exists in '/search' in microweber 2.0.15 and earlier allowing unauthenticated remote attackers to inject arbitrary web script or HTML via the 'keywords' parameter...
CVE-2024-40101: Improper Neutralization of Input During Web Page Generation
A Reflected Cross-site scripting XSS vulnerability exists in '/search' in microweber 2.0.15 and earlier allowing unauthenticated remote attackers to inject arbitrary web script or HTML via the 'keywords' parameter...
CVE-2024-32744
WonderCMS v3.4.3 contains a cross-site scripting (XSS) vulnerability within its Settings section. The root cause is the improper neutralization of input in the PAGE KEYWORDS parameter under the CURRENT PAGE module. An attacker can exploit this by injecting a crafted payload to execute arbitrary w...
CVE-2024-32744
A cross-site scripting XSS vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the PAGE KEYWORDS parameter under the CURRENT PAGE module...
CVE-2023-52064
Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the $keywords parameter at /core/admin/copyfrom.php...
Sql injection
Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the $keywords parameter at /core/admin/copyfrom.php...
WUZHI CMS Security Vulnerabilities
WUZHI CMS is an open source content management system CMS based on PHP and MySQL by WUZHI. A security vulnerability exists in WUZHI CMS, which originates from an SQL injection vulnerability in the $keywords parameter in /core/admin/copyfrom.php...
CVE-2023-52064
Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the $keywords parameter at /core/admin/copyfrom.php...
CVE-2023-52064
Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the $keywords parameter at /core/admin/copyfrom.php...
CVE-2023-52064
Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the $keywords parameter at /core/admin/copyfrom.php...
PT-2024-14380
Name of the Vulnerable Software and Affected Versions Wuzhicms version 4.1.0 Description A SQL injection issue was discovered via the keywords parameter at the "/core/admin/copyfrom.php" API endpoint. This allows for potential exploitation. Recommendations For Wuzhicms version 4.1.0, consider...
PT-2023-32713 · Unknown · Oscommerce
Name of the Vulnerable Software and Affected Versions: osCommerce version 4 Description: A problematic issue has been found in osCommerce, affecting an unknown part of the file /b2b-supermarket/catalog/all-products. The manipulation of the keywords argument with a specific input leads to cross-si...
