1371 matches found
CMSsite 1.0 SQL Injection
Exploit Title: CMSsite 1.0 - 'search' SQL injection Exploit Author : Majid kalantari [email protected] Date: 2019-01-27 Vendor Homepage : https://github.com/VictorAlagwu/CMSsite Software link: https://github.com/VictorAlagwu/CMSsite/archive/master.zip Version: 1.0 Tested on: Windows 10 CVE: N/A...
CMSsite 1.0 - search SQL Injection
CMSsite 1.0 - search SQL Injection Exploit Title: CMSsite 1.0 - 'search' SQL injection Exploit Author : Majid kalantari [email protected] Date: 2019-01-27 Vendor Homepage : https://github.com/VictorAlagwu/CMSsite Software link: https://github.com/VictorAlagwu/CMSsite/archive/master.zip Version:...
OLX: XSS - main page - search[user_id] parameter
Hi, how you doing? This is a pretty straight foward XSS in the main page. Affected parameter: searchuserid Direct Link: https://www.olx.pt/braga/?searchuserid=1zqjeu'":/1zqjeu;9, ;prompt9;&view=galleryWide Tested in updated firefox. Impact XSS allows a intruder to inject html and client side...
Evolution CMS Cross-Site Scripting Vulnerability
Evolution CMS is a content management system CMS. A cross-site scripting vulnerability exists in Evolution CMS version 1.4.x, which can be exploited by remote attackers to inject arbitrary web script or HTML by sending the 'search' parameter to the manager/ URI...
CVE-2018-16638
Evolution CMS 1.4.x allows XSS via the manager/ search parameter...
CVE-2018-16638
Evolution CMS 1.4.x allows XSS via the manager/ search parameter...
CVE-2018-16638
Evolution CMS 1.4.x is affected by a Cross‑Site Scripting (XSS) vulnerability in the manager/ search parameter. The CVE-2018-16638 entry documents an XSS flaw that can be triggered via the manager/ URL parameter, with the affected product specified as Evolution CMS 1.4.x. The provided connected d...
CVE-2018-16638: Improper Neutralization of Input During Web Page Generation
Evolution CMS 1.4.x allows XSS via the manager/ search parameter...
Meneame English Pligg 5.8 SQL Injection
Exploit Title: Meneame English Pligg 5.8 - 'search' SQL Injection Dork: N/A Date: 2018-11-13 Exploit Author: Ihsan Sencan Vendor Homepage: https://sourceforge.net/projects/meneame-english/ Software Link: https://master.dl.sourceforge.net/project/meneame/meneame/Beta%205.8/PliggBeta5.8.rar Version...
Surreal ToDo 0.6.1.2 - SQL Injection
Surreal ToDo 0.6.1.2 - SQL Injection Exploit Title: Surreal ToDo 0.6.1.2 - SQL Injection Dork: N/A Date: 2018-11-08 Exploit Author: Ihsan Sencan Vendor Homepage: http://getsurreal.com/surrealtodo Software Link:...
CVE-2018-18083
An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during "if" processing...
CVE-2018-18075
WikidForum 2.20 has SQL Injection via the rpc.php parentpostid or numrecords parameter, or the index.php?action=search selectsort parameter...
Moodle boost cross-site scripting vulnerability
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. boost theme is one of the theme components. A security vulnerability exists in boost...
Simple POS SQL Injection Vulnerability
Simple POS is a sales system based on PHP and jQuery. The system supports tax calculation, printing receipts and supports barcode scanning. An SQL injection vulnerability exists in the administration panel in Simple POS version 4.0.24. A remote attacker can exploit the vulnerability by sending th...
BTITeam XBTIT cross-site scripting vulnerability (CNVD-2019-28274)
XBTIT is an open source tracking software. A reflective cross-site scripting vulnerability exists in the 'keywords' parameter in the search function in /index.php?page=forums&action=search in BTITeam XBTIT 2.5.4. The vulnerability can be exploited to execute arbitrary JavaScript code in a user's...
IdeaCMS Cross-Site Scripting Vulnerability
IdeaCMS is a PHP and MySQL based enterprise website building system. A cross-site scripting vulnerability exists in IdeaCMS 2016-04-30 and earlier versions, which can be exploited by remote attackers to inject arbitrary Web script or HTML by sending the 'kw' parameter to...
Sandoba CP:Shop '. /cpshop/' module cross-site scripting vulnerability
Sandoba CP:Shop is a set of online store system of German Sandoba company. The system sales management, financial management and site search and other functions. The Sandoba CP:Shop 2016.1 version of the '. /cpshop/' module has a cross-site scripting vulnerability in the 'admin.php' file. The...
institutovotorantim.org.br XSS vulnerability
Open Bug Bounty ID: OBB-637363 Description| Value ---|--- Affected Website:| institutovotorantim.org.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
PvPGN Stats SQL Injection Vulnerability
PvPGN Stats is a PHP-based tool that supports the integration of websites with the PvPGN game server, displaying server status, ladder pages, and more. A SQL injection vulnerability exists in the ladder/stats.php file in PvPGN Stats version 2.4.6, which stems from the program not filtering databa...