124 matches found
Car Listing Script 1.8 Cross Site Scripting
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ ββ C r a C k E r ββ ββ T H E C R A C K O F E T E R N A L M I G H T ββ ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ βββββ From The Ashes and Dust Rises An...
SimplePHPscripts Simple Blog θ·¨η«θζ¬ζΌζ΄
SimplePHPscripts Simple Blog is a blogging system from the Bulgarian company SimplePHPscripts. A cross-site scripting vulnerability exists in SimplePHPscripts Simple Blog version 3.2, which stems from a problem with the file preview.php that can lead to cross-site scripting...
Property Listing Script 1.0 Cross Site Scripting
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ ββ C r a C k E r ββ ββ T H E C R A C K O F E T E R N A L M I G H T ββ ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ βββββ From The Ashes and Dust Rises An...
CVE-2023-3464
A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been classified as problematic. Affected is an unknown function of the file /preview.php of the component URL Parameter Handler. The manipulation of the argument p leads to cross site scripting. It is possible to laun...
Cross site scripting
A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been classified as problematic. Affected is an unknown function of the file /preview.php of the component URL Parameter Handler. The manipulation of the argument p leads to cross site scripting. It is possible to laun...
SimplePHPscripts Classified Ads Script θ·¨η«θζ¬ζΌζ΄
SimplePHPscripts Classified Ads Script is an advertisement tool that can be embedded into websites. A cross-site scripting vulnerability exists in SimplePHPscripts Classified Ads Script version 1.8, which stems from a problem in the file /preview.php, where manipulation of the parameter p can lea...
Event Script 2.1 Cross Site Scripting
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ ββ C r a C k E r ββ ββ T H E C R A C K O F E T E R N A L M I G H T ββ ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ βββββ From The Ashes and Dust Rises An...
Simple Forum 2.7 Cross Site Scripting
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ ββ C r a C k E r ββ ββ T H E C R A C K O F E T E R N A L M I G H T ββ ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ βββββ From The Ashes and Dust Rises An...
News Script Pro 2.4 Cross Site Scripting
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ ββ C r a C k E r ββ ββ T H E C R A C K O F E T E R N A L M I G H T ββ ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ βββββ From The Ashes and Dust Rises An...
PHPJabbers Event Ticketing System Script 1.0 Cross Site Scripting
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ ββ C r a C k E r ββ ββ T H E C R A C K O F E T E R N A L M I G H T ββ ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ βββββ From The Ashes and Dust Rises An...
GHSA-QJJQ-RCQ8-JW6J Elefant CMS Multiple XSS Vulnerabilities
Multiple cross-site scripting XSS vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 body parameter to admin/preview...
Elefant CMS Multiple XSS Vulnerabilities
Multiple cross-site scripting XSS vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 body parameter to admin/preview...
Cross site scripting
The Border Loading Bar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the f and t parameter found in the /titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1...
Border Loading Bar <= 1.0.1 - Reflected Cross-Site Scripting
The plugin is vulnerable to Reflected Cross-Site Scripting via the f and t parameter found in the /titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts...
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Description The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues Edit WPScanTeam: - The original report mentioned the issue...
CVE-2016-10957
The Akal theme through 2016-08-22 for WordPress has XSS via the framework/brad-shortcodes/tinymce/preview.php sc parameter...
CVE-2016-10957
The CVE-2016-10957 entry relates to the Akal WordPress theme (premium) and describes a Reflected/XSS vulnerability in the preview.php endpoint under framework/brad-shortcodes/tinymce, exploitable via the sc parameter. Multiple connected documents corroborate an XSS flaw affecting Akal up to 2016-...
CVE-2017-17641
Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter...
Sql injection
Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter...
CVE-2017-17641
CVE-2017-17641 affects Resume Clone Script 2.0.5, with a SQL injection in the preview.php id parameter. The root cause is an unsafely constructed SQL query using the id input, allowing a remote attacker to inject commands and potentially access or alter the database (Impact: partial to high in co...