2321 matches found
CVE-2017-18364
phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter...
CVE-2017-18364
CVE-2017-18364 concerns phpFK lite and is a reflected cross-site scripting (XSS) vulnerability. The affected components are the web interface files faq.php, members.php, search.php (via query strings) and user.php (via the user parameter). The underlying issue is that user-supplied input in these...
CVE-2017-18364: Improper Neutralization of Input During Web Page Generation
phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter...
PT-2019-8301
Name of the Vulnerable Software and Affected Versions phpFK lite affected versions not specified Description The issue concerns an XSS vulnerability. It can be exploited via the query string in faq.php, members.php, or search.php, or through the user parameter in user.php. Recommendations At the...
LayerBB SQL Injection Vulnerability
LayerBB is a small set of forum software. A SQL injection vulnerability exists in LayerBB version 1.1.1. A remote attacker can exploit this vulnerability by sending the 'searchquery' parameter to the search.php file to execute SQL commands...
CVE-2018-17988
LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...
CVE-2018-17988
LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...
Sql injection
LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...
CVE-2018-17988
LayerBB is affected: versions 1.1.1 and 1.1.3 expose an SQL Injection in the search.phpFile through the search_query parameter. The root cause is an injectable parameter in the search functionality, allowing an attacker to manipulate SQL commands. The CVE entry (CVE-2018-17988) lists this as a hi...
CVE-2018-17988
LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...
PT-2019-9538
Name of the Vulnerable Software and Affected Versions LayerBB versions 1.1.1 through 1.1.3 Description The issue is related to SQL Injection via the "search.php" API endpoint, specifically through the search query parameter. This allows for potential exploitation. Recommendations For versions 1.1...
CVE-2018-17988: Improper Neutralization of Special Elements used in an SQL Command
LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...
CMSsite 1.0 - search SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: CMSsite 1.0 - 'search' SQL injection Exploit Author : Majid kalantari email protected Vendor Homepage : https://github.com/VictorAlagwu/CMSsite Software link: https://github.com/VictorAlagwu/CMSsite/archive/master.zip Version: 1...
PT-2019-9804
Name of the Vulnerable Software and Affected Versions Plikli CMS version 4.0.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters in various PHP files. The...
CVE-2018-19414: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 keyword parameter to groups.php; 2 username parameter to login.php; or 3 date parameter to search.php...
CVE-2018-19331
An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...
CVE-2018-19331
An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...
PT-2018-14920
Name of the Vulnerable Software and Affected Versions S-CMS version 1.5 Description A SQL injection issue was found in the search functionality. The vulnerability can be exploited through the keyword parameter in the "search.php" endpoint. Recommendations For S-CMS version 1.5, avoid using the...
CVE-2018-19331: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...