EUVD-2017-6035

Malware in sbrugna...

movietimecars.com XSS vulnerability

Open Bug Bounty ID: OBB-609389 Description| Value ---|--- Affected Website:| movietimecars.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross site scripting

Cross Site Scripting XSS exists in NexusPHP 1.5.beta5.20120707 via the PATHINFO to location.php, related to PHPSELF...

CVE-2017-14534

Cross Site Scripting XSS exists in NexusPHP 1.5.beta5.20120707 via the PATHINFO to location.php, related to PHPSELF...

CVE-2017-14534: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS exists in NexusPHP 1.5.beta5.20120707 via the PATHINFO to location.php, related to PHPSELF...

pokolokochildcare.com XSS vulnerability

Vulnerable URL: http://www.pokolokochildcare.com/location.php?setlocation=1/-///'/"//--...

CVE-2013-5957: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in CRM/Core/Page/AJAX/Location.php in CiviCRM before 4.2.12, 4.3.x before 4.3.7, and 4.4.x before 4.4.beta4 allow remote attackers to execute arbitrary SQL commands via the value parameter to 1 ajax/jqState or 2 ajax/jqcounty...

Sql injection

SQL injection vulnerability in location.php in the eCal module in E-Xoopport Samsara 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the lid parameter...

CVE-2010-4942

The CVE-2010-4942 entry describes an SQL injection in the eCal module’s location.php for E-Xoopport Samsara 3.1 and earlier, exploitable via the lid parameter. Affected component: location.php in the eCal module of Samsara 3.1 and older. Root cause: unsafely constructed SQL commands through lid, ...

CVE-2010-4942: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in location.php in the eCal module in E-Xoopport Samsara 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the lid parameter...