Lucene search
+L

1215 matches found

Cvelist
Cvelist
added 2021/11/03 5:57 p.m.20 views

CVE-2020-18263

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search parameter. This vulnerability allows attackers to access sensitive database information...

7.6AI score0.00947EPSS
SaveExploits1References1
OSV
OSV
added 2021/10/13 6:15 p.m.12 views

CVE-2021-42224

SQL Injection vulnerability exists in IFSC Code Finder Project 1.0 via the searchifsccode POST parameter in /search.php...

9.8CVSS7.4AI score0.02263EPSS
SaveExploits3References3
Prion
Prion
added 2021/10/13 6:15 p.m.29 views

Sql injection

SQL Injection vulnerability exists in IFSC Code Finder Project 1.0 via the searchifsccode POST parameter in /search.php...

7.5CVSS9.9AI score0.02263EPSS
SaveExploits3References3Affected Software1
Cvelist
Cvelist
added 2021/10/13 5:47 p.m.46 views

CVE-2021-42224

SQL Injection vulnerability exists in IFSC Code Finder Project 1.0 via the searchifsccode POST parameter in /search.php...

10AI score0.02263EPSS
SaveExploits3References3
CNNVD
CNNVD
added 2021/10/13 12:0 a.m.11 views

Ifsc Code Finder Project SQL注入漏洞

Ifsc Code Finder Project is a web based application by Anuj Kumar Personal Developer. It is used to help users find Ifsc codes of any bank immediately. IFSC Code Finder Project suffers from a SQL injection vulnerability that originates in IFSC Code Finder Project 1.0 via the searchifsccode POST...

9.8CVSS8.8AI score0.02263EPSS
SaveExploits3References5
Cvelist
Cvelist
added 2021/10/01 3:42 p.m.29 views

CVE-2021-40975

Cross-site scripting XSS vulnerability in application/modules/admin/views/ecommerce/products.php in Ecommerce-CodeIgniter-Bootstrap Codeigniter 3.1.11, Bootstrap 3.3.7 allows remote attackers to inject arbitrary web script or HTML via the searchtitle parameter...

6.2AI score0.00838EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
added 2021/08/30 12:0 a.m.6 views

VulnCheck KEV: CVE-2021-32305

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter...

10CVSS7.6AI score0.86716EPSS
SaveExploits9References1
NVD
NVD
added 2021/08/23 11:15 p.m.28 views

CVE-2021-39599

Multiple Cross Site Scripting XSS vulnerabilities exists in CXUUCMS 3.1 in the search and c parameters in 1 public/search.php and in the 2 c parameter in admin.php...

6.1CVSS0.00641EPSS
SaveExploits1References1
OSV
OSV
added 2021/08/23 11:15 p.m.8 views

CVE-2021-39599

Multiple Cross Site Scripting XSS vulnerabilities exists in CXUUCMS 3.1 in the search and c parameters in 1 public/search.php and in the 2 c parameter in admin.php...

6.1CVSS5.8AI score0.00641EPSS
SaveExploits1References1
Prion
Prion
added 2021/08/23 11:15 p.m.23 views

Cross site scripting

Multiple Cross Site Scripting XSS vulnerabilities exists in CXUUCMS 3.1 in the search and c parameters in 1 public/search.php and in the 2 c parameter in admin.php...

4.3CVSS6.2AI score0.00641EPSS
SaveExploits1References1Affected Software1
zdt
zdt
added 2021/08/12 12:0 a.m.146 views

COVID19 Testing Management System 1.0 - (searchdata) SQL Injection Vulnerability

Exploit Title: COVID19 Testing Management System 1.0 - 'searchdata' SQL Injection Google Dork: intitle: "COVID19 Testing Management System" Exploit Author: Ashish Upsham Vendor Homepage: https://phpgurukul.com Software Link:...

0.2AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2021/07/22 6:15 p.m.6 views

CVE-2021-25197

Cross-site scripting XSS vulnerability in SourceCodester Content Management System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter to contentmanagementsystem\admin\newcontent.php...

6.1CVSS6.3AI score0.00838EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/07/22 5:20 p.m.21 views

CVE-2021-25197

Cross-site scripting XSS vulnerability in SourceCodester Content Management System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter to contentmanagementsystem\admin\newcontent.php...

6.2AI score0.00838EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2021/06/22 3:25 p.m.63 views

Cross-site Scripting in yii2cmf

yidashi yii2cmf 2.0 has XSS via the /search q parameter...

6.1CVSS4AI score0.00928EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/06/22 3:25 p.m.29 views

GHSA-MVRG-5C4W-7QV4 Cross-site Scripting in yii2cmf

yidashi yii2cmf 2.0 has XSS via the /search q parameter...

6.1CVSS6AI score0.00928EPSS
SaveExploits1References3
OSV
OSV
added 2021/06/14 2:15 p.m.4 views

CVE-2021-24346

The Stock in & out WordPress plugin through 1.0.4 has a search functionality, the lowest accessible level to it being contributor. The srch POST parameter is not validated, sanitised or escaped before using it in the echo statement, leading to a reflected XSS issue...

5.4CVSS6.1AI score0.00675EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB
added 2021/06/14 2:15 p.m.5 views

CVE-2021-24346

The Stock in & out WordPress plugin through 1.0.4 has a search functionality, the lowest accessible level to it being contributor. The srch POST parameter is not validated, sanitised or escaped before using it in the echo statement, leading to a reflected XSS issue...

5.4CVSS6.1AI score0.00675EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2021/06/14 12:0 a.m.9 views

Stock in & out WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in Stock in & out WordPress that stems from not...

5.4CVSS5.6AI score0.00675EPSS
SaveExploits2References2
zdt
zdt
added 2021/06/03 12:0 a.m.74 views

FUDForum 3.1.0 - (srch) Reflected XSS Vulnerability

Exploit Title: FUDForum 3.1.0 - 'srch' Reflected XSS Exploit Author: Piyush Patil Vendor Homepage: http://fudforum.org/ Software Link: https://sourceforge.net/projects/fudforum/files/FUDforum3.1.0.zip/download Version: FUDForum 3.1.0 Tested on: Windows 10 and Kali CVE : CVE-2021-27519 -Descriptio...

6.1CVSS0.5AI score0.07604EPSS
SaveExploits4
Packet Storm
Packet Storm
added 2021/06/03 12:0 a.m.161 views

FUDForum 3.1.0 Cross Site Scripting

Exploit Title: FUDForum 3.1.0 - 'srch' Reflected XSS Exploit Author: Piyush Patil Vendor Homepage: http://fudforum.org/ Software Link: https://sourceforge.net/projects/fudforum/files/FUDforum3.1.0.zip/download Version: FUDForum 3.1.0 Tested on: Windows 10 and Kali CVE : CVE-2021-27519 -Descriptio...

4.3CVSS0.1AI score0.07604EPSS
SaveExploits7
Rows per page
Query Builder