MantisBT Cross-Site Scripting Vulnerability (CNVD-2018-14791)

MantisBT is a Web-based open source defect tracking system of the MantisBT team . The system provides project management and defect tracking services in the form of Web operations. A cross-site scripting vulnerability exists in the View Filters page viewfilterspage.php in MantisBT versions 2.1.0...

TP-Link Archer C1200 Cross-Site Scripting Vulnerability

TP-Link Archer C1200 is a wireless router product from China P&L TP-LINK. A cross-site scripting vulnerability exists in the TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU version, which stems from the program's failure to filter special characters or illegitimate input. A remote attacke...

CVE-2018-13134

TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATHINFO to the /webpages/data URI...

CVE-2018-12254

router.php in the Harmis Ek rishta aka ek-rishta 2.10 component for Joomla! allows SQL Injection via the PATHINFO to a home/requesteduser/Sent%20interest/ URI...

CVE-2017-14536

trixbox 2.8.0.4 has XSS via the PATHINFO to /maint/index.php or /user/includes/language/langChooser.php...

Joomla! Tumder SQL Injection Vulnerability

Joomla! is a U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features.Tumder is used in one of the arcade game components. A SQL injection vulnerability exists in version 2.1 of Joomla! A remote...

CVE-2018-5984

SQL Injection exists in the Tumder An Arcade Games Platform 2.1 component for Joomla! via the PATHINFO to the category/ URI...

Vanguard Marketplace Digital Products PHP SQL Injection Vulnerability

Vanguard Marketplace Digital Products PHP is a set of PHP-based scripts for online trading sites for MP3 and other digital files. A SQL injection vulnerability exists in Vanguard Marketplace Digital Products PHP version 1.4. A remote attacker can inject SQL commands by sending PATHINFO to the /p...

CVE-2017-17873

Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATHINFO to the /p URI...

CVE-2017-17607

CMS Auditor Website 1.0 has SQL Injection via the PATHINFO to /news-detail...

CVE-2017-17572

FS Amazon Clone 1.0 has SQL Injection via the PATHINFO to /VerAyari...

Cacti cross-site scripting vulnerability (CNVD-2017-36486)

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool through snmpget to get the data , using RRDtool drawing graphs to analyze , and provide data and user management features . A cross-site scripting vulnerability exists in Cacti version 1.1.27...

DEBIAN-CVE-2017-16785

Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...

PG All Share Video SQL Injection Vulnerability

PG All Share Video is a set of video sharing website scripts. A SQL injection vulnerability exists in PG All Share Video version 1.0. A remote attacker can exploit this vulnerability by sending PATHINFO to search/tag, friends/index, or users/profile to inject SQL commands...

Job Board Script Software SQL Injection Vulnerability

Job Board Script Software is a web-based recruitment system. The system supports online resume creation, job application and job search report writing. A SQL injection vulnerability exists in Job Board Script Software. A remote attacker can exploit this vulnerability by sending PATHINFO to the...

Webmin Cross-Site Request Forgery Vulnerability (CNVD-2017-32345)

Webmin is a web-based system administration tool for Unix-like operating systems developed by Australian software developer Jamie Cameron and the Webmin community. A server-side request forgery vulnerability exists in Webmin 1.850, which arises from the program's failure to adequately filter user...

CVE-2017-15644

SSRF exists in Webmin 1.850 via the PATHINFO to tunnel/link.cgi, as demonstrated by a GET request for tunnel/link.cgi/http://INTRANET-IP:8000...

CVE-2017-14703

SQL injection vulnerability in Cash Back Comparison Script 1.0 allows remote attackers to execute arbitrary SQL commands via the PATHINFO to search/...

CVE-2017-14534

Cross Site Scripting XSS exists in NexusPHP 1.5.beta5.20120707 via the PATHINFO to location.php, related to PHPSELF...

NexusPHP Cross-Site Scripting Vulnerability (CNVD-2017-30100)

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A cross-site scripting vulnerability exists in NexusPHP. A remote attacker can exploit this vulnerability by sending PATHINFO to the cheaters.php or confirmresend.php file to inject arbitrary we...