OURPHP <= 7.2.0 - Cross Site Scripting

OURPHP alertdocument.domain" matchers-condition: and matchers: - type: word part: body words: - "alertdocument.domain...

OURPHP <= 7.2.0 - Cross Site Scripting

OURPHP al...

EUVD-2023-34636

Malicious code in bioql PyPI...

EUVD-2023-34635

Malicious code in bioql PyPI...

CVE-2025-51965

OURPHP thru 8.6.1 is vulnerable to Cross-Site Scripting XSS via the "Name" field of the "Complete Profile" functionality under the "My User Center" page, which can be accessed after registering through the front-end interface...

PT-2025-33411 · Ourphp · Ourphp

Name of the Vulnerable Software and Affected Versions: OURPHP versions through 8.6.1 Description: OURPHP through version 8.6.1 is susceptible to Cross-Site Scripting XSS via the Name field within the "Complete Profile" functionality located in the "My User Center" page. This functionality is...

CVE-2025-51965

OURPHP thru 8.6.1 is vulnerable to Cross-Site Scripting XSS via the "Name" field of the "Complete Profile" functionality under the "My User Center" page, which can be accessed after registering through the front-end interface...

OURPHP 安全漏洞

OURPHP is OURPHP open source an open source, cross-platform, enterprise-level + e-commerce + applet + APP multi-terminal synchronization CMS station building system. A security vulnerability exists in OURPHP 8.6.1 and previous versions, which stems from improper neutralization of Name field input...

CVE-2025-51965

CVE-2025-51965 affects OURPHP up to version 8.6.1, where the vulnerability is a Cross‑Site Scripting (XSS) flaw in the Name field of the Complete Profile function in My User Center, accessible after front‑end registration. The underlying issue and exploitation details are not further elaborated i...

CVE-2025-51965

OURPHP thru 8.6.1 is vulnerable to Cross-Site Scripting XSS via the "Name" field of the "Complete Profile" functionality under the "My User Center" page, which can be accessed after registering through the front-end interface...

CVE-2023-30210

OURPHP = 7.2.0 is vulnerable to Cross Site Scripting XSS via ourphptz.php...

CVE-2023-30212

OURPHP = 7.2.0 is vulnerale to Cross Site Scripting XSS via /client/manage/ourphpout.php...

CVE-2023-30211

OURPHP = 7.2.0 is vulnerable to SQL Injection...

Exploit for Cross-site Scripting in Ourphp

CVE-2023-30212-POC Creating a Vulnerable Docker Environmen...

Exploit for Cross-site Scripting in Ourphp

create a vulnerable Docker environment that is susceptible to...

Exploit for Cross-site Scripting in Ourphp

create a vulnerable Docker environment that is susceptible to...

Exploit for Cross-site Scripting in Ourphp

create a vulnerable Docker environment that is susceptible to...

Exploit for Cross-site Scripting in Ourphp

PoC exploit for CVE-2023-30212, a Cross-Site Scripting XSS vul...

Exploit for Cross-site Scripting in Ourphp

CVE-2023-30212 POC : Cross-Site Scripting via /client/man...

OURPHP SQL Injection Vulnerability

OURPHP is OURPHP open source an open source, cross-platform, enterprise-level + e-commerce + applet + APP multi-terminal synchronization CMS station-building system. OURPHP version 7.2.0 and previous versions exist SQL injection vulnerability. The vulnerability stems from the application's lack o...