CVE-2019-17226: Improper Neutralization of Input During Web Page Generation

CMS Made Simple CMSMS 2.2.11 allows XSS via the Site Admin Module Manager Search Term field...

PT-2019-15019

Name of the Vulnerable Software and Affected Versions CMS Made Simple versions 2.2.11 Description The issue allows for XSS via the Site Admin Module Manager Search Term field. Recommendations For version 2.2.11, update to a newer version that contains a fix for this issue...

FUEL CMS SQL Injection Vulnerability

FUEL CMS is a content management system based on CodeIgniter. FUEL CMS 1.4.1 suffers from a SQL injection vulnerability that can be exploited by an attacker via the layout, published or searchterm parameters of pages/items...

PT-2018-13725

Name of the Vulnerable Software and Affected Versions FUEL CMS version 1.4.1 Description The issue allows SQL Injection via the layout, published, or search term parameter to pages/items. Recommendations For FUEL CMS version 1.4.1, consider restricting access to the vulnerable parameters layout,...

lavidabenessereshop.it XSS vulnerability

Open Bug Bounty ID: OBB-666937 Description| Value ---|--- Affected Website:| lavidabenessereshop.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

OpenEMR SQL Injection Vulnerability (CNVD-2018-17199)

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A SQL injection vulnerability exists in the...

PT-2018-12906

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.1.4 Description The issue allows a remote authenticated attacker to execute arbitrary SQL commands. This is achieved via the search term parameter in the interface/de identification forms/find code popup.php file...

PT-2018-12900

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.1.4 Description The issue allows a remote authenticated attacker to execute arbitrary SQL commands. This is achieved via the search term parameter in the interface/de identification forms/find immunization popup.p...

OpenEMR SQL Injection Vulnerability (CNVD-2019-10146)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A SQL injection vulnerability exists in interface/deidentificationforms/finddrugpopup.php in OpenEMR versions prior to 5.0.1.4, which can be exploited by remote attackers to execute arbitrary SQL...

PT-2018-12898

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.1.4 Description The issue allows a remote authenticated attacker to execute arbitrary SQL commands. This is achieved via the search term parameter in the interface/de identification forms/find drug popup.php file...

CVE-2018-6928

PHP Scripts Mall News Website Script 2.0.4 has SQL Injection via a search term...

Sql injection

PHP Scripts Mall News Website Script 2.0.4 has SQL Injection via a search term...

CVE-2018-6928

PHP Scripts Mall News Website Script 2.0.4 has SQL Injection via a search term...

CVE-2018-6928: Improper Neutralization of Special Elements used in an SQL Command

PHP Scripts Mall News Website Script 2.0.4 has SQL Injection via a search term...

PT-2018-17826

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall News Website Script version 2.0.4 Description The issue is related to SQL Injection, which can be triggered via a search term. This allows an attacker to inject malicious SQL code, potentially leading to unauthorized access or...

regioactive.de XSS vulnerability

Vulnerable URL: https://www.regioactive.de/suchen?term=%22%2F%3E%27%3E%22%3Eu%3Ci%3E5%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

DLGuard Cross-Site Scripting Vulnerability

DLGuard is a complete sales and customer management system used to protect and streamline online business. A cross-site scripting vulnerability exists in DLGuard. A remote attacker can leverage the 'page', 'c' or 'redirect' parameters in the index.php script or the main page's 'search' field...

PT-2014-6012

Name of the Vulnerable Software and Affected Versions WP-Business Directory plugin versions 1.0.2 and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the forms/search.php file of the WP-Business Directory plugin for WordPress. These vulnerabilities allo...

Sql injection

Multiple SQL injection vulnerabilities in index.php in MIM:InfiniX 1.2.003 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters in a calendar action, or 3 a search term in the search form...

CVE-2009-0540

Libero CVE-2009-0540 is an XSS vulnerability in Libero 5.3 SP5 (and possibly versions before 5.5 SP1) that allows remote attackers to inject arbitrary web script via the search term field. The issue arises from insufficient input filtering/sanitisation of HTML tags in the web app, and is categori...