1215 matches found
shoppingvilaolimpia.com.br XSS vulnerability
Open Bug Bounty ID: OBB-597871 Description| Value ---|--- Affected Website:| shoppingvilaolimpia.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
YzmCMS 3.6 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: YzmCMS 3.6 XSS Vulnerability Exploit Author: zzw email protected Vendor Homepage: http://www.yzmcms.com/ Software Link: http://www.yzmcms.com/ Version: 3.6 CVE : CVE-2018-7653 This is a XSS vulnerability than can attack the user...
Cross site scripting
iScripts SonicBB 1.0 has Reflected Cross-Site Scripting via the query parameter to search.php...
CVE-2018-9235
iScripts SonicBB 1.0 has Reflected Cross-Site Scripting via the query parameter to search.php...
CVE-2018-9122
In Crea8social 2018.2, there is Reflected Cross-Site Scripting via the term parameter to the /search URI...
Crea8Social cross-site scripting vulnerability (CNVD-2018-07586)
Crea8social is a PHP-based social networking platform developed by Nigerian software developer Tiamiyu Waliu Kola. A cross-site scripting vulnerability exists in Crea8social version 2018.2. A remote attacker can exploit the vulnerability by sending the 'term' parameter to the /search URI to injec...
Cross site scripting
Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advancedfilter parameter aka the Search Parameter...
CVE-2018-7894
Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advancedfilter parameter aka the Search Parameter...
CVE-2018-7894
Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advancedfilter parameter aka the Search Parameter...
CVE-2018-7894
CVE-2018-7894 affects Eramba e1.0.6.033, with a Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advanced_filter parameter. The issue is documented across multiple sources (NVD entry for CVE-2018-7894 and related Red Hat/CNVD records) and is described as: an XSS vulnerability cau...
Afian FileRun SQL Injection Vulnerability
Afian FileRun is an extensible file manager from Afian AB, Sweden, that features file sharing, cloud file storage, and more. A SQL injection vulnerability exists in Afian FileRun versions prior to 2018.02.13. A remote attacker can exploit the vulnerability to execute SQL commands with the help of...
Sql injection
Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users§ion=cpanel&page=list request...
CVE-2018-7734
Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users§ion=cpanel&page=list request...
Sql injection
Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata§ion=cpanel&page=listfiletypes request...
CVE-2018-7735
Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata§ion=cpanel&page=listfiletypes request...
CVE-2018-7734
Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users§ion=cpanel&page=list request...
gatbik.com XSS vulnerability
Open Bug Bounty ID: OBB-566336 Description| Value ---|--- Affected Website:| gatbik.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-6024
SQL Injection exists in the Project Log 1.5.3 component for Joomla! via the search parameter...