PT-2022-8083

Name of the Vulnerable Software and Affected Versions zzcms version 2019 Description An issue exists in the software where SQL Injection is possible. This occurs in the dl/dl print.php file through an id parameter value that has a trailing comma. Recommendations For zzcms version 2019, avoid usin...

Xerte Cross-Site Scripting Vulnerability

Xerte is an open source software from The Xerte Project community in the UK. Used to create learning objects. Xerte has a security vulnerability that stems from a site scripting XSS vulnerability in The Xerte Project via the link parameter in print.php. No details of the vulnerability are current...

CVE-2021-44662

A Site Scripting XSS vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php...

CVE-2021-44662

A Site Scripting XSS vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php...

Cross site scripting

A Site Scripting XSS vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php...

CVE-2021-44662

A Site Scripting XSS vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php...

CVE-2021-44662

CVE-2021-44662 describes a reflected Site Scripting (XSS) vulnerability in the Xerte Project when using the link parameter in print.php, affecting Xerte up to version 3.8.4. The core issue is a client-side/XSS flaw exploited through a crafted link parameter, with network-based exposure and user i...

CVE-2021-44662

A Site Scripting XSS vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php...

PT-2022-12195

Name of the Vulnerable Software and Affected Versions Xerte Project Xerte versions 3.8.4 and earlier Description A Site Scripting XSS issue exists via the link parameter in print.php. Recommendations For versions 3.8.4 and earlier, consider disabling access to the print.php endpoint until a patch...

CVE-2021-44662: Improper Neutralization of Input During Web Page Generation

A Site Scripting XSS vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php...

PT-2021-22852

Name of the Vulnerable Software and Affected Versions zzcms versions 8.2 through 8.3, 2020, 2021 Description An SQL Injection issue exists in the dl/dl print.php file when registering ordinary users. This allows for potential exploitation during the user registration process. Recommendations For...

PT-2021-10424

Name of the Vulnerable Software and Affected Versions: zz cms version 2019 Description: A SQL injection issue has been found that allows attackers to retrieve sensitive data by exploiting the id parameter on the "/dl/dl print.php" API endpoint. Recommendations: For zz cms version 2019, consider...

PT-2021-22871

Name of the Vulnerable Software and Affected Versions OpenEMR version 6.0.0 Description The issue allows an attacker to read the messages of all users due to an Insecure Direct Object Reference vulnerability. This can be exploited via the pnotes print.php endpoint with the noteid parameter...

IPeakCMS 3.5 - Boolean-based blind SQLi

Exploit Title: IPeakCMS 3.5 - Boolean-based blind SQLi Date: 07.12.2020 Exploit Author: MoeAlbarbari Vendor Homepage: https://ipeak.ch/ Software Link: N/A Version: 3.5 Tested on: BackBox Linux CVE : CVE-2021-3018 Check the CMS version :goto www.site.com/cms/ and you will notice that in the login...

Sql injection

ipeak Infosystems ibexwebCMS aka IPeakCMS 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the id parameter on the /cms/print.php page...

CVE-2021-3018: Improper Neutralization of Special Elements used in an SQL Command

ipeak Infosystems ibexwebCMS aka IPeakCMS 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the id parameter on the /cms/print.php page...

PT-2021-18654

Name of the Vulnerable Software and Affected Versions ipeak Infosystems ibexwebCMS aka IPeakCMS version 3.5 Description The issue is related to an unauthenticated Boolean-based SQL injection. This occurs via the id parameter on the "/cms/print.php" page. Recommendations For version 3.5, consider...

365brivdienas.lv XSS vulnerability

Open Bug Bounty ID: OBB-662053 Description| Value ---|--- Affected Website:| 365brivdienas.lv Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

rashad.benawa.com XSS vulnerability

Open Bug Bounty ID: OBB-651501 Description| Value ---|--- Affected Website:| rashad.benawa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

birdwatchersdigest.com XSS vulnerability

Open Bug Bounty ID: OBB-629575 Description| Value ---|--- Affected Website:| birdwatchersdigest.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...