CVE-2017-10673

admin/profile.php in GetSimple CMS 3.x has XSS in a name field...

CVE-2017-10673

admin/profile.php in GetSimple CMS 3.x has XSS in a name field...

PT-2017-11426

Name of the Vulnerable Software and Affected Versions GetSimple CMS versions 3.x Description The issue is related to a name field in the admin/profile.php file, which has XSS. Recommendations For GetSimple CMS versions 3.x, update to a version that includes a fix for this issue, or as a temporary...

CVE-2017-10673: Improper Neutralization of Input During Web Page Generation

admin/profile.php in GetSimple CMS 3.x has XSS in a name field...

physics.dur.ac.uk XSS vulnerability

Vulnerable URL: https://www.physics.dur.ac.uk/profiles/profile.php?userid=--%3E%22%3E%3C/a%3E%3C/script%3E%3C/title%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

webhostingtalk.com XSS vulnerability

Vulnerable URL: http://www.webhostingtalk.com/profile.php?do=dismissnotice Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3634 Google Pagerank| 5 VIP website status:| Yes Check...

ugcnetonline.in XSS vulnerability

Vulnerable URL: http://www.ugcnetonline.in/[email protected]=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 98681...

modelportfolio4hire.com XSS vulnerability

Vulnerable URL: http://modelportfolio4hire.com/profile.php?name=%27%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=91 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Ultimate PHP Board aka myUPB before 2.2.8 allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to search.php or 2 avatar parameter to profile.php...

CVE-2015-2217

Ultimate PHP Board (UPB, also known as myUPB) is affected by multiple XSS vulnerabilities. The CVE-2015-2217 entry describes remote XSS via the q parameter in search.php or the avatar parameter in profile.php, with impact described as injection of arbitrary web script/HTML. Public sources within ...

CVE-2015-2217

Multiple cross-site scripting XSS vulnerabilities in Ultimate PHP Board aka myUPB before 2.2.8 allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to search.php or 2 avatar parameter to profile.php...

PT-2015-5669

Name of the Vulnerable Software and Affected Versions Ultimate PHP Board versions prior to 2.2.8 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the q parameter to...

CVE-2015-2217: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Ultimate PHP Board aka myUPB before 2.2.8 allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to search.php or 2 avatar parameter to profile.php...

Sql injection

SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the reqnewemail parameter...

CVE-2014-10029

SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the reqnewemail parameter...

CVE-2014-10029

SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the reqnewemail parameter...

CVE-2014-10029

FluxBB contains a SQL injection vulnerability in profile.php (req_new_email) exploitable on FluxBB before 1.4.13 and 1.5.x before 1.5.7. The flaw stems from insufficient input sanitization in the change_email flow, enabling remote attackers to execute arbitrary SQL commands. Affected versions: Fl...

PT-2015-3673

Name of the Vulnerable Software and Affected Versions FluxBB versions prior to 1.4.13 FluxBB versions 1.5.x prior to 1.5.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the req new email parameter in the "profile.php" file. Recommendations F...

CVE-2014-10029: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the reqnewemail parameter...

PT-2014-2864

Name of the Vulnerable Software and Affected Versions Claroline versions 1.11.9 and earlier Description The issue allows remote authenticated users to inject arbitrary web script or HTML via specific fields, including the Search field in an inbox action to "messaging/messagebox.php", the "First...