Cross-site Scripting (XSS)

nukeviet/nukeviet is vulnerable to cross-site scripting.The vulnerability exists in Request.php due to incorrectly neutralized user-controllable inputs which allows an attacker to inject and execute malicious javascript through Data URL Handler...

PT-2022-24992 · Unknown · Nukeviet Cms

Name of the Vulnerable Software and Affected Versions: NukeViet CMS versions prior to 4.5 Description: A vulnerability has been found in the function filterAttr of the file vendor/vinades/nukeviet/Core/Request.php of the component Data URL Handler. The manipulation of the argument attrSubSet lead...

Cross-site Scripting (XSS)

nukeviet/nukeviet is vulnerable to cross-site scripting. An attacker can inject and execute malicious javascript through the $preTag parameter in filterTags of Request.php...

Thinkphp 'Request.php' file code execution vulnerability

ThinkPHP is developed and maintained by the Shanghai Top Thinking Information Technology Co., Ltd. development and maintenance of the MVC structure of the open-source PHP framework. A code execution vulnerability exists in the Thinkphp 'Request.php' file. An attacker could exploit this...

Design/Logic Flaw

xowl/request.php in Ximdex 4.0 has XSS via the content parameter...

CVE-2018-12272: Improper Neutralization of Input During Web Page Generation

xowl/request.php in Ximdex 4.0 has XSS via the content parameter...

PT-2018-11093

Name of the Vulnerable Software and Affected Versions Ximdex version 4.0 Description The issue is related to a security problem where an attacker can inject malicious code. The problem occurs due to improper validation of user input in the content parameter of the 'xowl/request.php' file...

banks.rssing.com XSS vulnerability

Vulnerable URL: http://banks.rssing.com/request.php?req=gsearch=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5871 VIP...

feed.rssing.com XSS vulnerability

Vulnerable URL: http://feed.rssing.com/request.php?req=gsearch=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

omnigooch-rocks.rssing.com XSS vulnerability

Vulnerable URL: http://omnigooch-rocks.rssing.com/request.php?req=gsearch%27%22%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

littleappletech.com XSS vulnerability

Open Bug Bounty ID: OBB-257672 Description| Value ---|--- Affected Website:| littleappletech.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pentest205.rssing.com XSS vulnerability

Vulnerable URL: http://pentest205.rssing.com/request.php?req=gsearch=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5240...

CVE-2016-6195: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in forumrunner/includes/moderation.php in vBulletin before 4.2.2 Patch Level 5 and 4.2.3 before Patch Level 1 allows remote attackers to execute arbitrary SQL commands via the postids parameter to forumrunner/request.php, as exploited in the wild in July 2016...

PT-2016-6795

Name of the Vulnerable Software and Affected Versions vBulletin versions prior to 4.2.2 Patch Level 5 vBulletin versions 4.2.3 prior to Patch Level 1 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the postids parameter to "forumrunner/request.php"...

editorsforum.org XSS vulnerability

Vulnerable URL: http://www.editorsforum.org/application-request.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2614143 Google Pagerank| 4 VIP website status:| No Check...

PT-2015-4267

Name of the Vulnerable Software and Affected Versions concrete5 versions 5.7.2.1 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via vulnerable parameters. Specifically, the gName parameter in "single pages/dashboard/users/groups/bulkupdate.php" an...

Sql injection

Multiple SQL injection vulnerabilities in PHP Live! 3.2.1 and 3.2.2 allow remote attackers to execute arbitrary SQL commands via the x parameter to 1 messagebox.php and 2 request.php...

CVE-2009-4749: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PHP Live! 3.2.1 and 3.2.2 allow remote attackers to execute arbitrary SQL commands via the x parameter to 1 messagebox.php and 2 request.php...

CVE-2007-3218

Cross-site scripting XSS vulnerability in request.php in PHP Live! 3.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the pagex parameter...

CVE-2007-3218: Undefined Security Weakness

Cross-site scripting XSS vulnerability in request.php in PHP Live! 3.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the pagex parameter...