Code injection

dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI...

CVE-2018-9017

dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI...

CVE-2018-9017

CVE-2018-9017 affects dsmall v20180320 with a cross-site scripting (XSS) vulnerability可 in the public/index.php/home/membersnsfriend/findlist.html page via the member search box. CNVD/CNVD-2018-07558 describe a remote attacker injecting HTML/JavaScript to obtain sensitive information. The provide...

PT-2018-18783

Name of the Vulnerable Software and Affected Versions dsmall version 20180320 Description The issue allows for XSS via the member search box at the "public/index.php/home/membersnsfriend/findlist.html" URI. Recommendations For version 20180320, consider restricting access to the member search box...

CVE-2018-9017: Improper Neutralization of Input During Web Page Generation

dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI...

myprivatetutor.com XSS vulnerability

Open Bug Bounty ID: OBB-104792 Description| Value ---|--- Affected Website:| myprivatetutor.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

dadecitychamber.org XSS vulnerability

Vulnerable URL: http://www.dadecitychamber.org/Dade%20City%20Chamber%20Member%20Search.cfm?who Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8339080 Google Pagerank| 4 VIP website...

PHPCMS2008 BETA2 tasteless 0day a-vulnerability warning-the black bar safety net

data\cachemodel\membersearch.class.php username directly get into SQL. Tasteless is because of this hole to the administrator to set the 'registered members' to have a 'search' function. if$this-modelid if$where $where = "AND $where"; if$this-modelid == 1 0 && $GET'username' $username =...

dzoic handshakes sql injection >> index.php on $fname

By :s3rv3rhack3rAli Jasbi From hackerz.ir vendro : dzoic.com version : all risk : high bug : http://Victim/dzoic/index.php?handler=search&action=perform&searchtype=members&fname=Sql...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 q parameter to a admin/membersearch.php, or 3 the userid parameter to b admin/edituser.php...

Free Articles Directory Remote Command Exucetion

Web Site : http://www.99articles.com Script Demo Site : http://www.articlesone.com General : 1. Support rssfeed XML to distribute articles for others website and blogs. It will make grow website popularity 2. Newsletter to be growing visitors 3. Membership system for writer participants submit...