SUSE CVE-2020-10802

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a...

CVE-2023-22936 Authenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk Enterprise

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘searchlistener’ parameter in a search allows for a blind server-side request forgery SSRF by an authenticated user. The initiator of the request cannot see the response without the presence of an additional vulnerability within t...

PT-2023-18778 · Splunk · Splunk Enterprise

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 8.1.13 Splunk Enterprise versions prior to 8.2.10 Splunk Enterprise versions prior to 9.0.4 Description: The issue allows a search to bypass safeguards for risky commands using the...

CVE-2023-25241

bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...

Cross site scripting

bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...

CVE-2023-25241

bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...

CVE-2023-25241

bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...

CVE-2023-25241

bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...

CVE-2023-25241

CVE-2023-25241 affects bgERP v22.31 and is a reflected cross-site scripting (XSS) vulnerability exploitable via the Search parameter. The issue is categorized as CVSS v3.1 with base score 6.1 (Medium), with Network attack vector, no privileges required, user interaction required, and a changed sc...

CVE-2022-4279

A vulnerability classified as problematic has been found in SourceCodester Human Resource Management System 1.0. Affected is an unknown function of the file /hrm/employeeview.php. The manipulation of the argument search leads to cross site scripting. It is possible to launch the attack remotely...

PT-2022-26581 · Sourcecodester · Sourcecodester Human Resource Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Management System version 1.0 Description: A problematic issue has been discovered, affecting an unknown function of the file /hrm/employeeview.php. The manipulation of the search argument leads to cross-site...

Human Resource Management System 跨站脚本漏洞

Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Human Resource Management System version 1.0, which stems from a problem with an unknown function in the file /hrm/employeeview.php, where manipulation of...

CVE-2022-45329

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search parameter. This vulnerability allows attackers to access database information...

CVE-2022-45329

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search parameter. This vulnerability allows attackers to access database information...

AeroCMS SQL注入漏洞

AeroCMS is a content management system from AeroCMS Inc. in the United States. AeroCMS version v0.0.1 suffers from a security vulnerability that stems from the discovery of a contained SQL injection vulnerability via the Search parameter. An attacker exploits the vulnerability to access database...

Maxon ERP SQL注入漏洞

Maxon ERP is an ERP software from Maxon ERP, Inc. A security vulnerability exists in Maxon ERP that stems from an incorrect manipulation of the parameter tbsearch resulting in sql injection...

Huaxia ERP 安全漏洞

Huaxia ERP is an ERP software from Huaxia, China. A security vulnerability exists in Huaxia ERP that originates from an unknown method in the Retail Management component, where manipulation of the search parameter can lead to information disclosure...

U.S. Dept Of Defense: XSS via Client Side Template Injection on www.███/News/Speeches

Dear DoD - Team, I am able to execute javascript code on www.███████/News/Speeches. This endpoint has a search functionality with the parameter Search. The supplied value to this parameter gets embedded into the website. Furthermore the frontend of the website is presumably created with a templat...

Academy Learning Management System Reflective Cross-Site Scripting Vulnerability

Academy Learning Management System is an Academy Learning Management System from the Creativeitem team. The vulnerability is caused by the lack of effective filtering and escaping of user-supplied data in the Search parameter, which could be exploited to launch a reflective cross-site scripting...

Online Banking System SQL Injection Vulnerability (CNVD-2022-68376)

Online Banking System is an online banking system developed using PHP and MySQL. version v1.0 of Online Banking System has a security vulnerability that stems from a SQL injection issue in the search parameter in the /net-banking/beneficiary.php location. No details of the vulnerability are...