CVE-2020-36996

PHPFusion 9.03.50 contains a persistent cross-site scripting vulnerability in the print.php page that fails to properly sanitize user-submitted message content. Attackers can inject malicious JavaScript through forum messages that will execute when the print page is generated, allowing script...

PHPFusion cross-site scripting vulnerabilities

PHPFusion is an open-source, lightweight content management system developed by Malaysia-based PHPFusion Company, based on MySQL and PHP. This system includes modules for news, articles, and forums. Version PHPFusion 9.03.50 contains a cross-site scripting vulnerability. This vulnerability arises...

CVE-2025-4243

A vulnerability, which was classified as critical, has been found in code-projects Online Bus Reservation System 1.0. Affected by this issue is some unknown functionality of the file /print.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The...

Simple Sales Management System 跨站脚本漏洞

Simple Sales Management System is a simple sales management system from the personal developer Carlo Montero. A security vulnerability exists in Simple Sales Management System version 1.0, which can be exploited to execute arbitrary code via the productname and productprice parameters on the...

CVE-2022-43329

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php...

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS from the ZZCMS team in China. zzCMS version 2019 is vulnerable to SQL injection, which stems from the lack of security filtering of the id parameter in /dl/dlprint.php. No detailed vulnerability details are provided at this time...

The vulnerability of the epsc_print_page() function (device/gdevepsc.c) in the software suite for processing, transforming, and generating Ghostscript documents, allowing a hacker to trigger a service failure.

The vulnerability of the epscprintpage function device/gdevepsc.c in the software suite for processing, transforming, and generating Ghostscript documents is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a service failure...