1144 matches found
Sql injection
Jobberbase 2.0 has SQL injection via the PATHINFO to the jobs-in endpoint...
CVE-2019-20447
Jobberbase 2.0 has SQL injection via the PATHINFO to the jobs-in endpoint...
CVE-2019-20447
Jobberbase 2.0 is affected by SQL injection via PATH_INFO on the jobs-in endpoint. The root cause is lack of validation of externally supplied SQL statements in the database-based application, enabling an attacker to manipulate queries. CVSS metrics indicate high to critical impact (C/H I/H A/H) ...
CVE-2019-20447: Improper Neutralization of Special Elements used in an SQL Command
Jobberbase 2.0 has SQL injection via the PATHINFO to the jobs-in endpoint...
Cross site scripting
Cross-site scripting XSS vulnerability in the handlerequest function in lib/HTTPServer.pm in Monitorix before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2013-7071
Cross-site scripting XSS vulnerability in the handlerequest function in lib/HTTPServer.pm in Monitorix before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2013-7071
Cross-site scripting XSS vulnerability in the handlerequest function in lib/HTTPServer.pm in Monitorix before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2013-7071: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the handlerequest function in lib/HTTPServer.pm in Monitorix before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2019-12917
A reflected XSS vulnerability exists in Quest KACE Systems Management Appliance Server Center 9.1.317 affecting the userui/softwarelibrary.php component via the PATHINFO...
Cross site scripting
A reflected XSS vulnerability exists in Quest KACE Systems Management Appliance Server Center 9.1.317 affecting the userui/softwarelibrary.php component via the PATHINFO...
CVE-2019-12917
A reflected XSS vulnerability exists in Quest KACE Systems Management Appliance Server Center 9.1.317 affecting the userui/softwarelibrary.php component via the PATHINFO...
CVE-2019-12917: Improper Neutralization of Input During Web Page Generation
A reflected XSS vulnerability exists in Quest KACE Systems Management Appliance Server Center 9.1.317 affecting the userui/softwarelibrary.php component via the PATHINFO...
Debian DLA-1970-1 : php5 security update
Emil Lerner, beched and d90pwn found a buffer underflow in php5-fpm, a Fast Process Manager for the PHP language, which can lead to remote code execution. Instances are vulnerable depending on the web server configuration, in particular PATHINFO handling. For a full list of preconditions, check:...
[SECURITY] [DLA 1970-1] php5 security update
Package : php5 Version : 5.6.40+dfsg-0+deb8u7 CVE ID : CVE-2019-11043 Emil Lerner, beched and d90pwn found a buffer underflow in php5-fpm, a Fast Process Manager for the PHP language, which can lead to remote code execution. Instances are vulnerable depending on the web server configuration, in...
CVE-2019-17660
A cross-site scripting XSS vulnerability in admin/translate/translateheaderview.php in LimeSurvey 3.19.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the tolang parameter, as demonstrated by the index.php/admin/translate/sa/index/surveyid/336819/lang/ PATHINFO...
Cross site scripting
A cross-site scripting XSS vulnerability in admin/translate/translateheaderview.php in LimeSurvey 3.19.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the tolang parameter, as demonstrated by the index.php/admin/translate/sa/index/surveyid/336819/lang/ PATHINFO...
CVE-2019-16657
TuziCMS 2.0.6 has XSS via the PATHINFO to a group URI, as demonstrated by index.php/article/group/id/2/...
Code injection
TuziCMS 2.0.6 has XSS via the PATHINFO to a group URI, as demonstrated by index.php/article/group/id/2/...
CVE-2019-16657
TuziCMS 2.0.6 has XSS via the PATHINFO to a group URI, as demonstrated by index.php/article/group/id/2/...
CVE-2019-16657: Improper Neutralization of Input During Web Page Generation
TuziCMS 2.0.6 has XSS via the PATHINFO to a group URI, as demonstrated by index.php/article/group/id/2/...