1216 matches found
Sql injection
Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the searchvideo.php search parameter...
JEXTN Question And Answer extension SQL Injection Vulnerability
Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other functions.JEXTN Question And Answer extension is used in one of the online question and answer plug-ins. A SQL injection vulnerability...
CVE-2017-17892
Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the searchvideo.php search parameter...
CVE-2017-17893
Readymade Video Sharing Script has XSS via the searchvideo.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edit.php fname parameter...
Techno - Portfolio Management Panel Cross-Site Scripting Vulnerability
Techno - Portfolio Management Panel is a set of portfolio management panel scripts. A cross-site scripting vulnerability exists in Techno - Portfolio Management Panel 2017-11-16 and earlier versions. A remote attacker can exploit the vulnerability by sending the 's' parameter to the...
Techno - Portfolio Management Panel Information Disclosure Vulnerability
Techno - Portfolio Management Panel is a set of portfolio management panel scripts. An information disclosure vulnerability exists in Techno - Portfolio Management Panel 2017-11-16 and earlier versions. An attacker can exploit the vulnerability by sending an invalid 's' parameter to the...
CVE-2017-17694
Techno - Portfolio Management Panel through 2017-11-16 allows XSS via the panel/search.php s parameter...
CVE-2017-17695
Techno - Portfolio Management Panel through 2017-11-16 allows SQL Injection via the panel/search.php s parameter...
CVE-2017-17694
Techno - Portfolio Management Panel through 2017-11-16 allows XSS via the panel/search.php s parameter...
Design/Logic Flaw
Techno - Portfolio Management Panel through 2017-11-16 allows XSS via the panel/search.php s parameter...
CVE-2017-17695
Techno - Portfolio Management Panel through 2017-11-16 allows SQL Injection via the panel/search.php s parameter...
CVE-2017-5663
In Apache Fineract 0.4.0-incubating, 0.5.0-incubating, and 0.6.0-incubating, an authenticated user with client/loan/center/staff/group read permissions is able to inject malicious SQL into SELECT queries. The 'sqlSearch' parameter on a number of endpoints is not sanitized and appended directly to...
CVE-2017-17597
Nearbuy Clone Script 3.2 has SQL Injection via the categorylist.php search parameter...
CVE-2017-17597
Nearbuy Clone Script 3.2 has SQL Injection via the categorylist.php search parameter...
Sql injection
FS Trademe Clone 1.0 has SQL Injection via the searchitem.php search parameter or the generalitemdetails.php id parameter...
Sql injection
Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the singledetail.php sid parameter...
safirperfum.ir XSS vulnerability
Open Bug Bounty ID: OBB-417450 Description| Value ---|--- Affected Website:| safirperfum.ir Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
disneyfoodblog.com XSS vulnerability
Open Bug Bounty ID: OBB-372642 Description| Value ---|--- Affected Website:| disneyfoodblog.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...