CVE-2023-34545

A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL...

CVE-2023-34545

A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL...

CSZCMS SQL注入漏洞

CSZCMS is an open source web application that allows to manage all the content and settings on the website. A SQL injection vulnerability exists in CSZCMS version 1.3.0 that stems from the application's lack of validation of externally entered SQL statements. A remote attacker can exploit the...

PT-2023-24962 · Unknown · Simplephpscripts Classified Ads Script

Name of the Vulnerable Software and Affected Versions: SimplePHPscripts Classified Ads Script version 1.8 Description: A vulnerability was found in the component URL Parameter Handler of the file /preview.php. The manipulation of the argument p leads to cross site scripting. It is possible to...

Sql injection

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of the processlogin.php login form...

SUSE CVE-2007-4465

Cross-site scripting XSS vulnerability in modautoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that th...

CVE-2022-42109

Online-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via the p parameter at /shopping/product.php...

CVE-2022-42109

Online-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via the p parameter at /shopping/product.php...

PT-2022-26253 · Unknown · Online-Shopping-System-Advanced

Name of the Vulnerable Software and Affected Versions: Online-shopping-system-advanced version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the p parameter at the "/shopping/product.php" API endpoint. Recommendations: For...

CVE-2022-42109

Online-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via the p parameter at /shopping/product.php...

CVE-2021-43109

An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...

CVE-2011-1009

Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter...

XooDigital - (p) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: XooDigital - 'p' SQL Injection Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://xooscripts.com/product/digital-download-protection-script.html Demo Site: http://xooscripts.com/demos/xoodigital/ Version: Lastest Tested...

CVE-2018-16450

CraftedWeb through 2013-09-24 has reflected XSS via the p parameter...

Ubiquiti Inc.: Reflected cross-site scripting (XSS) vulnerability in scores.ubnt.com allows attackers to inject arbitrary web script via p parameter.

Dear Ubiquiti Networks bug bounty team, Short Description --- scores.ubnt.com is still vulnerable to reflected XSS, a form of client-side code injection wherein one can execute malicious scripts into a page. The fix to https://hackerone.com/reports/158484 does not suffice for some browsers mainly...

Sql injection

SQL injection vulnerability in ferretCMS 1.0.4-alpha allows remote attackers to execute arbitrary SQL commands via the p parameter in an update action to admin.php...

CVE-2014-3846

Cross-site scripting XSS vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter to index.php...

CVE-2013-5979

The CVE-2013-5979 issue affects Spring Signage Xibo 1.2.x (pre-1.2.3) and 1.4.x (pre-1.4.2). A directory traversal flaw allows remote attackers to read arbitrary files by supplying a .. in the p parameter to index.php. Impact: potential exposure of sensitive server files. Root cause: insufficient...

PT-2013-5900

Name of the Vulnerable Software and Affected Versions Spring Signage Xibo versions 1.2.x through 1.2.2 Spring Signage Xibo versions 1.4.x through 1.4.1 Description The issue allows remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the p parameter to the "index.ph...