302 matches found
Code-Projects Student Information System SQL Injection Vulnerability
Student Information System is a student information system. The Student Information System suffers from a SQL injection vulnerability that originates from the parameter s in the /searchquery.php file that does not effectively filter user input. An attacker can exploit this vulnerability by...
DokuWiki <= 2025-05-14a XSS Vulnerability
DokuWiki is prone to reflected cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
EUVD-2009-1466
Malware in sbrugna...
EUVD-2008-2392
Malware in sbrugna...
EUVD-2021-11927
Malware in sbrugna...
EUVD-2015-0184
Malware in sbrugna...
EUVD-2018-10807
Malware in sbrugna...
EUVD-2019-6538
Malware in sbrugna...
EUVD-2008-1087
Malware in sbrugna...
EUVD-2005-4491
Malware in sbrugna...
Search.cgi?action=cgi_query Avtech Code Execution
The vulnerability of the Search.cgi?action=cgiquery component of the Avtech digital video recorder software lies in insufficient validation of input data when processing parameters such as username or queryb64str. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
CVE-2025-7385: Improper Neutralization of Special Elements used in an SQL Command
Input from search query parameter in GOV CMS is not sanitized properly, leading to a Blind SQL injection vulnerability, which might be exploited by an unauthenticated remote attacker. Versions 4.0 and above are not affected...
CVE-2025-50690
A Cross-Site Scripting XSS vulnerability exists in SpatialReference.org OSGeo/spatialreference.org versions prior to 2025-05-17 commit 2120adfa17ddd535bd0f539e6c4988fa3a2cb491. The vulnerability is caused by improper handling of user input in the search query parameter. An attacker can craft a...
SpatialReference.org security vulnerability
SpatialReference.org is an online resource platform organized by SpatialReference. A security vulnerability exists in versions of SpatialReference.org prior to 2025-05-17, which stems from mishandling of search query parameter inputs and could lead to a cross-site scripting attack...
CVE-2025-50690: Improper Neutralization of Input During Web Page Generation
A Cross-Site Scripting XSS vulnerability exists in SpatialReference.org OSGeo/spatialreference.org versions prior to 2025-05-17 commit 2120adfa17ddd535bd0f539e6c4988fa3a2cb491. The vulnerability is caused by improper handling of user input in the search query parameter. An attacker can craft a...
CVE-2019-13646
Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query. NOTE: It is asserted that an attacker must have the same access rights as the user in order to be able to execute the vulnerability...
CVE-2019-15569
HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.java and SortDirection.java...
CVE-2018-10704
yidashi yii2cmf 2.0 has XSS via the /search q parameter...