Design/Logic Flaw

Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint...

Doctors Appointment Script SQL Injection Vulnerability

Doctors Appointment Script is an apartment booking service website built with HTML5, CSS3, PHP 5 and jQuery. Doctors Appointment Script has a SQL injection vulnerability in several parameters such as lat, lon, category, etc. on the search page, which can be exploited by an attacker to read...