CVE-2021-28423

Multiple SQL Injection vulnerabilities in Teachers Record Management System 1.0 thru 2.1 allow remote authenticated users to execute arbitrary SQL commands via the 'editid' GET parameter in edit-subjects-detail.php, edit-teacher-detail.php, or the 'searchdata' POST parameter in search.php...

PT-2021-9873

Name of the Vulnerable Software and Affected Versions DedeCMS version V5.7 SP2 Description A XSS issue in the "/uploads/dede/action search.php" endpoint allows an authenticated user to execute remote arbitrary code via the keyword parameter. Recommendations For DedeCMS version V5.7 SP2, as a...

PHPFusion < 8.00.90 / 9.x < 9.10.00 XSS/CSRF Vulnerability

PHPFusion is prone to a cross-site scripting XSS and cross-site request forgery CSRF vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2021-28280

CSRF + Cross-site scripting XSS vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML...

CVE-2021-28280

CSRF + Cross-site scripting XSS vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML...

CVE-2021-28280

CSRF + Cross-site scripting XSS vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML...

Cross site scripting

CSRF + Cross-site scripting XSS vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML...

CVE-2021-28280: Improper Neutralization of Input During Web Page Generation

CSRF + Cross-site scripting XSS vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML...

PT-2021-17838

Name of the Vulnerable Software and Affected Versions: PHPFusion version 9.03.110 Description: The issue concerns a combination of CSRF and Cross-site scripting XSS vulnerability in the search.php file. This allows remote attackers to inject arbitrary web script or HTML, potentially leading to...

LayerBB 1.1.4 SQL Injection

Exploit Title: LayerBB 1.1.4 - 'searchquery' SQL Injection Date: 2021-02-19 Exploit Author: Görkem Haşin Version: 1.1.4 Tested on: Linux/Windows POST /search.php HTTP/1.1 Host: Target Payload: searchquery=Lffd' AND 8460=SELECT CASE WHEN 8460=8460 THEN 8460 ELSE SELECT 1560 UNION SELECT 2122 END--...

PT-2021-4000

Name of the Vulnerable Software and Affected Versions SourceCodester Fantastic-Blog-CMS version 1.0 Description The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the search field in the...

CVE-2020-35151

CVE-2020-35151 affects The Online Marriage Registration System 1.0. The vulnerability is a Time-Based SQL Injection in the post parameter searchdata of user/search.php (and noted in admin/search.php in the exploit). Root cause: lack of input validation for searchdata, enabling attacker-controlled...

CVE-2020-35151: Improper Neutralization of Special Elements used in an SQL Command

The Online Marriage Registration System 1.0 post parameter "searchdata" in the user/search.php request is vulnerable to Time Based Sql Injection...

Victor CMS SQL Injection Vulnerability (CNVD-2020-68864)

Victor CMS is a simple content management system. Victor CMS 1.0 suffers from a SQL injection vulnerability. The vulnerability can be exploited to conduct SQL injection attacks via the 'search' parameter on the search.php page...

CVE-2020-29280

The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page...

CVE-2020-29280

The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page...

Sql injection

The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page...

CVE-2020-29280: Improper Neutralization of Special Elements used in an SQL Command

The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page...

PT-2020-17130

Name of the Vulnerable Software and Affected Versions Victor CMS version 1.0 Description The issue concerns SQL injection via the search parameter on the "search.php" page. This allows for potential exploitation of the application's database. No information is provided about the estimated number ...

Victor CMS SQL注入漏洞

Victor CMS is a simple content management system. Victor CMS 1.0 suffers from a SQL injection vulnerability. The vulnerability can be exploited to conduct SQL injection attacks via the 'search' parameter on the search.php page...