voetius.nl XSS vulnerability

Open Bug Bounty ID: OBB-620769 Description| Value ---|--- Affected Website:| voetius.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

meridian24.pl XSS vulnerability

Open Bug Bounty ID: OBB-596186 Description| Value ---|--- Affected Website:| meridian24.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

renaissanceimmobilier.fr XSS vulnerability

Open Bug Bounty ID: OBB-572586 Description| Value ---|--- Affected Website:| renaissanceimmobilier.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-16356: Improper Neutralization of Input During Web Page Generation

Reflected XSS in Kubik-Rubik SIGE aka Simple Image Gallery Extended before 3.3.0 allows attackers to execute JavaScript in a victim's browser by having them visit a plugins/content/sige/pluginsige/print.php link with a crafted img, name, or caption parameter...

PT-2018-6279

Name of the Vulnerable Software and Affected Versions: Kubik-Rubik SIGE aka Simple Image Gallery Extended versions prior to 3.3.0 Description: The issue allows attackers to execute JavaScript in a victim's browser. This is achieved by having the victim visit a crafted link, specifically a...

pension-luginsland.de XSS vulnerability

Vulnerable URL: http://www.pension-luginsland.de/typo3conf/ext/kjimagelightbox2/lib/class.txkjimagelightbox2print.php?image=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

socialistnigeria.org XSS vulnerability

Vulnerable URL: http://www.socialistnigeria.org/print.php?text=1"...

gpva.org XSS vulnerability

Vulnerable URL: http://www.gpva.org/score-sheet-print.php?leagueid=54=" Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 25819634 VIP website status:| No...

Sql injection

Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 return, 2 display, 3 table, or 4 search parameter to functions/suggest.php; 5 the id parameter to functions/widgets.php, 6 the category parameter to...

PT-2014-2304

Name of the Vulnerable Software and Affected Versions Banana Dance versions B.2.6 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters to different functions, including the return, display, table, or search...

CVE-2012-5244: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Banana Dance B.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 return, 2 display, 3 table, or 4 search parameter to functions/suggest.php; 5 the id parameter to functions/widgets.php, 6 the category parameter to...

CVE-2014-3857

Multiple SQL injection vulnerabilities in Kerio Control Statistics in Kerio Control formerly WinRoute Firewall before 8.3.2 allow remote authenticated users to execute arbitrary SQL commands via the 1 x16 or 2 x17 parameter to print.php...

CVE-2014-3857

Multiple SQL injection vulnerabilities in Kerio Control Statistics in Kerio Control formerly WinRoute Firewall before 8.3.2 allow remote authenticated users to execute arbitrary SQL commands via the 1 x16 or 2 x17 parameter to print.php...

CVE-2014-3857: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Kerio Control Statistics in Kerio Control formerly WinRoute Firewall before 8.3.2 allow remote authenticated users to execute arbitrary SQL commands via the 1 x16 or 2 x17 parameter to print.php...

PT-2014-5557

Name of the Vulnerable Software and Affected Versions Kerio Control versions prior to 8.3.2 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the x 16 or x 17 parameter to the "print.php" endpoint. Recommendations For versions prior to...

photokorn 1.53/1.54 print.php cat Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/17683/info Photokorn is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker ...

WM-News 0.5 Print.PHP Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19968/info WM-News is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlyin...

JPortal 2.2.1 Print.php SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10430/info JPortal is reportedly affected by a remote SQL injection vulnerability in the print.inc.php script. This issue is due to a failure of the application to properly sanitize user-supplied URI input before using it...

Joomla Component (com_team) SQL Injection Vulnerability

No description provided by source. Joomla Component comteam SQL Injection Vulnerability Author : CoBRa21 Dork : inurl:comteam Exploit http://localhost/PATH/print.php?task=person&id=36 and 1=1 http://localhost/PATH/print.php?task=person&id=36 and 1=2 http://localhost/PATH/print.php?task=person&id=...

myphpnuke < 1.8.8_8rc2 (xss/sql) Multiple Vulnerabilities

No description provided by source. Cross-Site Scripting and SQL Injection vulnerabilities in myPHPNuke By MustLive http://websecurity.com.ua Detailed information: http://websecurity.com.ua/2391/ Description: There are Cross-Site Scripting and SQL Injection vulnerabilities in print.php in myPHPNuk...