2321 matches found
CVE-2019-25156 dstar2018 Agency search.php cross site scripting
A vulnerability classified as problematic was found in dstar2018 Agency up to 61. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument QSType/QuickSearch leads to cross site scripting. The attack can be launched remotely. The patch is...
CVE-2019-25156 dstar2018 Agency search.php cross site scripting
A vulnerability classified as problematic was found in dstar2018 Agency up to 61. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument QSType/QuickSearch leads to cross site scripting. The attack can be launched remotely. The patch is...
PT-2023-11381 · Unknown · Dstar2018 Agency
Name of the Vulnerable Software and Affected Versions: dstar2018 Agency versions up to 61 Description: A problematic vulnerability was found in an unknown functionality of the file search.php, where the manipulation of the argument QSType/QuickSearch leads to cross-site scripting. The attack can ...
CVE-2019-25156: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in dstar2018 Agency up to 61. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument QSType/QuickSearch leads to cross site scripting. The attack can be launched remotely. The patch is...
CVE-2023-45017
The connected PT-2023-29358 entry identifies CVE-2023-45017 as an unauthenticated SQL Injection in Online Bus Booking System v1.0, caused by lack of validation on the destination parameter in search.php. This allows unfiltered input to reach the database; impact could include data disclosure or m...
PT-2023-29358 · Unknown · Online Bus Booking System
Name of the Vulnerable Software and Affected Versions: Online Bus Booking System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the destination parameter of the "search.php" resource does not validate the characters received and...
CVE-2023-36306: Improper Neutralization of Input During Web Page Generation
A Cross Site Scripting XSS vulnerability in Adiscon Aiscon LogAnalyzer through 4.1.13 allows a remote attacker to execute arbitrary code via the asktheoracle.php, details.php, index.php, search.php, export.php, reports.php, and statistics.php components...
CVE-2023-39551: Improper Neutralization of Special Elements used in an SQL Command
PHPGurukul Online Security Guards Hiring System v.1.0 is vulnerable to SQL Injection via osghs/admin/search.php...
CVE-2023-39551
PHPGurukul Online Security Guards Hiring System v.1.0 is vulnerable to SQL Injection via osghs/admin/search.php...
CVE-2020-20808
Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd and starttijd parameters of do/search.php...
PT-2023-11563
Name of the Vulnerable Software and Affected Versions Qibosoft qibosoft versions 7 and earlier Description The issue allows a remote attacker to execute arbitrary code via the eindtijd and starttijd parameters of the "do/search.php" endpoint. This enables the attacker to perform actions such as...
CVE-2020-20808: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd and starttijd parameters of do/search.php...
CVE-2020-20808
Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd and starttijd parameters of do/search.php...
Cross site scripting
A vulnerability was found in phpscriptpoint Lawyer 1.6. It has been classified as problematic. This affects an unknown part of the file search.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-235401 was assigned to this...
CVE-2023-3945 phpscriptpoint Lawyer search.php cross site scripting
A vulnerability was found in phpscriptpoint Lawyer 1.6. It has been classified as problematic. This affects an unknown part of the file search.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-235401 was assigned to this...
CVE-2023-3945: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in phpscriptpoint Lawyer 1.6. It has been classified as problematic. This affects an unknown part of the file search.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-235401 was assigned to this...
CVE-2023-3861
A vulnerability was found in phpscriptpoint Insurance 1.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation leads to cross site scripting. The attack can be launched remotely. The identifier VDB-235213 was...
Cross site scripting
A vulnerability was found in phpscriptpoint Insurance 1.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation leads to cross site scripting. The attack can be launched remotely. The identifier VDB-235213 was...
CVE-2023-3861 phpscriptpoint Insurance search.php cross site scripting
A vulnerability was found in phpscriptpoint Insurance 1.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation leads to cross site scripting. The attack can be launched remotely. The identifier VDB-235213 was...
CVE-2023-3861
CVE-2023-3861 affects phpscriptpoint Insurance 1.2. The vulnerability is a cross-site scripting flaw in an unknown function within the file /search.php, allowing remote exploitation. Several connected sources confirm the issue and its association with a client-facing search handler. The CVE descr...