1559 matches found
CVE-2020-8519
SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql...
CVE-2020-8519: Improper Neutralization of Special Elements used in an SQL Command
SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql...
PT-2020-14545 · Centos · Centos Web Panel
Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version cwp-e17.0.9.8.923 Description: This issue allows remote attackers to disclose sensitive information on affected installations. Authentication is not required to exploit this issue. The flaw exists within the ajax mail...
PT-2020-6133
Name of the Vulnerable Software and Affected Versions phpzag live add edit delete data tables records with ajax php mysql affected versions not specified Description The issue is related to a lack of protection against SQL query structure exploitation, potentially allowing a remote attacker to...
LibreNMS 1.46 SQL Injection
Exploit Title: LibreNMS 1.46 - 'search' SQL Injection Google Dork:unknown Date: 2019-09-01 Exploit Author: Punt Vendor Homepage: https://www.librenms.org Software Link: https://www.librenms.org Version:1.46 and less Tested on:Linux and Windows CVE: N/A Affected Device: more than 4k found on Shoda...
CVE-2020-12054
The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter a search query. Also affected are 16 themes if the plugin is enabled by the same author: Alchemist and Alchemist PRO, Izabel and Izabel PRO, Chique and Chique PRO, Clean Enterprise and Clean Enterprise...
CVE-2020-12054
The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter a search query. Also affected are 16 themes if the plugin is enabled by the same author: Alchemist and Alchemist PRO, Izabel and Izabel PRO, Chique and Chique PRO, Clean Enterprise and Clean Enterprise...
PrestaShop cross-site scripting vulnerability (CNVD-2020-25940)
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in the 'alias' and 'search' parameters of...
CVE-2020-5272
In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is a reflected XSS on Search page with alias and search parameters. The problem is patched in 1.7.6.5...
CVE-2019-19390
The Search parameter of the Software Catalogue section of Matrix42 Workspace Management 9.1.2.2765 and below accepts unfiltered parameters that lead to multiple reflected XSS issues...
PT-2020-10152
Name of the Vulnerable Software and Affected Versions Matrix42 Workspace Management versions 9.1.2.2765 and below Description The issue concerns the Search parameter in the Software Catalogue section, which accepts unfiltered parameters. This leads to multiple reflected XSS issues. Recommendation...
CVE-2019-19390: Improper Neutralization of Input During Web Page Generation
The Search parameter of the Software Catalogue section of Matrix42 Workspace Management 9.1.2.2765 and below accepts unfiltered parameters that lead to multiple reflected XSS issues...
CVE-2018-10704
yidashi yii2cmf 2.0 has XSS via the /search q parameter...
CVE-2018-10704
yidashi yii2cmf 2.0 has XSS via the /search q parameter...
Design/Logic Flaw
yidashi yii2cmf 2.0 has XSS via the /search q parameter...
CVE-2018-10704
yidashi yii2cmf 2.0 has XSS via the /search q parameter...
CVE-2018-10704
CVE-2018-10704 affects yidashi yii2cmf 2.0 and is described as an XSS vulnerability triggered via the /search q parameter. The connected documents corroborate XSS in yii2cmf 2.0, but explicit details such as whether the flaw is stored vs reflected, affected versions beyond 2.0, or concrete remedi...
CVE-2013-5988
A Cross-site Scripting XSS vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter...