CVE-2025-51965: Improper Neutralization of Input During Web Page Generation

OURPHP thru 8.6.1 is vulnerable to Cross-Site Scripting XSS via the "Name" field of the "Complete Profile" functionality under the "My User Center" page, which can be accessed after registering through the front-end interface...

OURPHP 安全漏洞

OURPHP is OURPHP open source an open source, cross-platform, enterprise-level + e-commerce + applet + APP multi-terminal synchronization CMS station building system. A security vulnerability exists in OURPHP 8.6.1 and previous versions, which stems from improper neutralization of Name field input...

CVE-2025-51965

OURPHP thru 8.6.1 is vulnerable to Cross-Site Scripting XSS via the "Name" field of the "Complete Profile" functionality under the "My User Center" page, which can be accessed after registering through the front-end interface...

CVE-2025-51965

The enterprise-level CMS OURPHP is vulnerable to Cross-Site Scripting (XSS) in versions through 8.6.1 . The root cause is the improper neutralization of input within the "Name" field of the "Complete Profile" functionality, located under the "My User Center" page. This area is accessible to users...

CVE-2023-30212

OURPHP = 7.2.0 is vulnerale to Cross Site Scripting XSS via /client/manage/ourphpout.php...

CVE-2023-30210

OURPHP = 7.2.0 is vulnerable to Cross Site Scripting XSS via ourphptz.php...

CVE-2023-30211

OURPHP = 7.2.0 is vulnerable to SQL Injection...

Exploit for Cross-site Scripting in Ourphp

CVE-2023-30212-POC Creating a Vulnerable Docker Environmen...

Exploit for Cross-site Scripting in Ourphp

create a vulnerable Docker environment that is susceptible to...

Exploit for Cross-site Scripting in Ourphp

create a vulnerable Docker environment that is susceptible to...

Exploit for Cross-site Scripting in Ourphp

create a vulnerable Docker environment that is susceptible to...

Exploit for Cross-site Scripting in Ourphp

PoC exploit for CVE-2023-30212, a Cross-Site Scripting XSS vul...

Exploit for Cross-site Scripting in Ourphp

CVE-2023-30212 POC : Cross-Site Scripting via /client/man...

OURPHP ourphp_tz.php file cross-site scripting vulnerability

OURPHP is OURPHP open source an open source, cross-platform, enterprise-level + e-commerce + applet + APP multi-terminal synchronization CMS station-building system. OURPHP 7.2.0 version and previous versions of the existence of cross-site scripting vulnerability , the vulnerability stems from th...

OURPHP SQL Injection Vulnerability

OURPHP is OURPHP open source an open source, cross-platform, enterprise-level + e-commerce + applet + APP multi-terminal synchronization CMS station-building system. OURPHP version 7.2.0 and previous versions exist SQL injection vulnerability. The vulnerability stems from the application's lack o...

CVE-2023-30212

OURPHP = 7.2.0 is vulnerale to Cross Site Scripting XSS via /client/manage/ourphpout.php...

CVE-2023-30212

OURPHP = 7.2.0 is vulnerale to Cross Site Scripting XSS via /client/manage/ourphpout.php...

Cross site scripting

OURPHP = 7.2.0 is vulnerale to Cross Site Scripting XSS via /client/manage/ourphpout.php...

CVE-2023-30210

OURPHP = 7.2.0 is vulnerable to Cross Site Scripting XSS via ourphptz.php...

CVE-2023-30211

OURPHP = 7.2.0 is vulnerable to SQL Injection...