Input validation

A vulnerability in the web framework of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation of HTTP parameters supplied by the user. An attacker could...

CVE-2016-0765

Multiple cross-site scripting XSS vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page or 2 action parameter...

PT-2017-7653

Name of the Vulnerable Software and Affected Versions eShop plugin version 6.3.14 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the page or action parameter in the...

Olive Diary DX vulnerable to cross-site scripting

Overview Olive Diary DX provided by Olive Design contains a cross-site scripting vulnerability CWE-79 due to a flaw in processing the page parameter. Impact An artbitrary script may be executed on the user's web browser. Solution Do not use Olive Diary DX Olive Diary DX is no longer being develop...

Liberscol Reflective Cross-Site Scripting Vulnerability

Liberscol is a French open source digital teaching platform. A reflective cross-site scripting vulnerability exists in the error parameter of Login/jsp in the 2013-09-20 version of Liberscol, which can be used by an attacker to inject malicious scripts...

youporn.com XSS vulnerability

Vulnerable URL: http://www.youporn.com/?page=2...

WordPress Profile Builder 2.4.0 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Profile Builder WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...

Wordpress spreadsheet 插件-spreadsheet.php文件page参数-跨站脚本漏洞

No description provided by source...

Didiwiki directory traversal vulnerability

didiwiki is a Wikipedia implementation written in C by software developer Matthew Allum, which is primarily used for personal records such as notes and to-do lists. A directory traversal vulnerability exists in didiwiki's wiki.c file, which stems from the failure of the api/page/get URI to...

DEBIAN-CVE-2013-7448

Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get...

CVE-2013-7448

Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get...

PT-2016-1596

Name of the Vulnerable Software and Affected Versions DidiWiki affected versions not specified Description The issue is related to a directory traversal vulnerability in the wiki.c component of DidiWiki. This vulnerability allows remote attackers to read arbitrary files by exploiting the page...

Role Scoper WordPress Plugin Reflective Cross-Site Scripting Vulnerability

Role Scoper WordPress plugin is comprehensive access control solution that controls read and edit permissions like a CMS. Role Scoper WordPress 1.3.66 and earlier versions do not effectively filter the "objectname" HTTP GET parameter value of "/wp-admin/admin.php" when "page" is set to...

Welcart vulnerable to cross-site scripting

Overview Welcart provided by Collne Inc. is a WordPress plugin for creating shopping websites. Welcart contains a cross-site scripting CWE-79 vulnerability due to the processing of uscesreferer parameter in admin.php. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the...

SQL Injection Vulnerability in Panmicro E-office /E-mobile/flownext_page.php Parameters

Panmicro E-office is an OA product launched by Panmicro for small and medium-sized organizations. A SQL injection vulnerability exists in the Panmicro E-office /E-mobile/flownextpage.php parameter, which can be exploited by attackers to obtain sensitive information from the database...

PT-2016-2330

Name of the Vulnerable Software and Affected Versions Apache Struts versions 1.1 through 1.3.10 Description The issue allows remote attackers to bypass intended access restrictions. This is due to insufficient input validation in the MultiPageValidator implementation. The exploitation can occur...

SQL Buddy /sqlbuddy/ page parameter remote directory traversal vulnerability

SQL Buddy is a nice lightweight ajax database management tool. SQL Buddy fails to properly filter user input, allowing remote attackers to exploit a vulnerability to access arbitrary files via the 'page' parameter...

CVE-2015-2678

Multiple cross-site scripting XSS vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter in the categories page to gxadmin/index.php or 2 page parameter to index.php...

CVE-2015-2678

Multiple cross-site scripting XSS vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter in the categories page to gxadmin/index.php or 2 page parameter to index.php...

PT-2015-5830

Name of the Vulnerable Software and Affected Versions GeniXCMS version prior to 0.0.2 Description The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to cross-site scripting XSS attacks. This is possible via the cat parameter in the categories page to...