103 matches found
PT-2022-10765 · Unknown · Semcms Shop
Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue is related to SQL Injection via the Ant Menu.php file. This allows for potential exploitation. Recommendations: For SEMCMS SHOP version 1.1, consider restricting access to the Ant Menu.php file a...
CVE-2022-30481: Improper Neutralization of Special Elements used in an SQL Command
Food-order-and-table-reservation-system- 1.0 is vulnerable to SQL Injection in categorywise-menu.php via the catid parameters...
CVE-2020-29171: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin/wp-security-blacklist-menu.php in the Tips and Tricks HQ All In One WP Security & Firewall all-in-one-wp-security-and-firewall plugin before 4.4.6 for WordPress...
CVE-2020-9439: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Uncanny Owl Tin Canny LearnDash Reporting before 3.4.4 allows authenticated remote attackers to inject arbitrary web script or HTML via the searchkey GET Parameter in TinCanContentListTable.php, message GET Parameter in licensing.php,...
Cross site scripting
A cross-site scripting XSS vulnerability in noMenu and noSubMenu in core/navigation/MENU.php in WIKINDX prior to version 5.8.1 allows remote attackers to inject arbitrary web script or HTML via the method parameter...
CVE-2019-12930: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in noMenu and noSubMenu in core/navigation/MENU.php in WIKINDX prior to version 5.8.1 allows remote attackers to inject arbitrary web script or HTML via the method parameter...
CVE-2018-15847
An issue was discovered in puppyCMS 5.1. There is an XSS vulnerability via menu.php in the "Add Page/URL" URL link field...
CVE-2018-15847
An issue was discovered in puppyCMS 5.1. There is an XSS vulnerability via menu.php in the "Add Page/URL" URL link field...
Cross site scripting
An issue was discovered in puppyCMS 5.1. There is an XSS vulnerability via menu.php in the "Add Page/URL" URL link field...
CVE-2018-15847
CVE-2018-15847 affects puppyCMS 5.1: an XSS vulnerability exists in menu.php via the "Add Page/URL" field. The issue allows injection of JavaScript through that link field, as described by multiple sources (NVD/CNVD). CVSS metrics indicate a MEDIUM severity risk (base score 6.1/3.0; network attac...
CVE-2018-15847
An issue was discovered in puppyCMS 5.1. There is an XSS vulnerability via menu.php in the "Add Page/URL" URL link field...
CVE-2018-15847: Improper Neutralization of Input During Web Page Generation
An issue was discovered in puppyCMS 5.1. There is an XSS vulnerability via menu.php in the "Add Page/URL" URL link field...
CVE-2018-11588
Centreon 3.4.6 including Centreon Web 2.8.23 is vulnerable to an authenticated user injecting a payload into the username or command description, resulting in stored XSS. This is related to www/include/core/menu/menu.php and www/include/configuration/configObject/command/formArguments.php...
CVE-2018-11588: Improper Neutralization of Input During Web Page Generation
Centreon 3.4.6 including Centreon Web 2.8.23 is vulnerable to an authenticated user injecting a payload into the username or command description, resulting in stored XSS. This is related to www/include/core/menu/menu.php and www/include/configuration/configObject/command/formArguments.php...
CVE-2017-15640: Improper Neutralization of Input During Web Page Generation
app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter...
Sql injection
Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter...
CVE-2017-15993
Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter...
CVE-2017-15993
Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter...
CVE-2017-15993
CVE-2017-15993 : Zomato Clone Script is vulnerable to SQL Injection in the restaurant-menu.php resid parameter. The issue allows an attacker to inject SQL commands, potentially revealing or modifying database data. This vulnerability is documented across multiple sources (NVD/CVE records) with hi...