445 matches found
F3 designs Website SQL Injection Vulnerability
F3 designs is a custom website design and development framework. A SQL injection vulnerability exists in the lang parameter of the index.php page of F3 designs. Because the program fails to adequately filter user-submitted input, an attacker could use this vulnerability to compromise the...
CrossComm SQL Injection Vulnerability
CrossComm is a mobile and web application development studio. An SQL injection vulnerability exists in the lang parameter of CrossComm's index.php page, which can be used by an attacker to take control of the application, access or modify data, or exploit a potential vulnerability in the underlyi...
PHPSYSINFO Local File Disclosure Vulnerability
phpsysinfo is a php script tool software that supports php web server for detecting some information about the host. A local file disclosure vulnerability exists in the lang parameter of the language.php page in PHPSYSINFO version 3.1.12, which can be exploited by attackers to obtain sensitive...
oslo.geodata.es XSS vulnerability
Vulnerable URL: http://oslo.geodata.es/elpraturb/urbanisme.php?lang=es";...
microring.am XSS vulnerability
Vulnerable URL: http://www.microring.am/index.php?lang=arm" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10196302 VIP website status:| No Check microring.am SSL connection:| Grad...
DM enterprise built Station system \indexDM_load.php variable lang SQL injection
No description provided by source...
pp-telascica.hr XSS vulnerability
Vulnerable URL: http://pp-telascica.hr/index.php?lang=en'"/alert/openbugbounty/...
Sophos UTM Nessus Web UI Cross-Site Scripting Vulnerability
Sophos UTM is a unified threat management appliance. which provides gateway security and endpoint security. The appliance provides gateway security protection and endpoint security protection.Nessus Web UI is one of the components used to access the Nessus Vulnerability Scanner based on a web...
CVE-2016-2046
Cross-site scripting XSS vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2016-2046
Cross-site scripting XSS vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2016-2046
Cross-site scripting XSS vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
WordPress xili-language Plugin <= 2.8.5 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability in index.php lang parameter. Solution Update the plugin...
WordPress WPML plugin SQL injection vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WPML is one of the multi-language plug-ins. A SQL injection vulnerability exists in versions of the WordPress WPML...
osTicket Cross-Site Scripting Vulnerability
osTicket is a WEB-based ticket e-commerce system. A cross-site scripting vulnerability exists in osTicket versions prior to 1.9.5.1, which allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in client.inc.php in osTicket before 1.9.5.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
xili-language - index.php lang Parameter XSS
The xili-language WordPress plugin was affected by an index.php lang Parameter XSS security vulnerability...
CVE-2014-5112
maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary commands via shell metacharacters in the lang parameter...
Directory traversal
Multiple directory traversal vulnerabilities in Fonality trixbox allow remote attackers to read arbitrary files via a .. dot dot in the lang parameter to 1 home/index.php, 2 asteriskinfo/asteriskinfo.php, 3 repo/repo.php, or 4 endpointcfg/endpointcfg.php in maint/modules/...