CVE-2018-19145

This CVE concerns S-CMS v1.5 and an XSS vulnerability in search.php reachable via the keyword parameter. The issue is triggered through input handling in the search routine, allowing injection of web scripts or HTML. The core information confirms the vulnerability exists in the S-CMS 1.5 componen...

CVE-2018-19145

An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...

PT-2018-14834

Name of the Vulnerable Software and Affected Versions S-CMS version 1.5 Description An issue was discovered in the software, which is related to a security problem. The problem is an XSS issue in the "search.php" file via the keyword parameter. Recommendations For S-CMS version 1.5, consider...

CVE-2018-19145: Improper Neutralization of Input During Web Page Generation

An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...

Sql injection

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie...

Sql injection

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php...

CVE-2018-18785

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php...

CVE-2018-18791

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie...

CVE-2018-18791: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie...

PT-2018-14649

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue exists in zzcms where SQL Injection is possible. This occurs in the zs/subzs.php file when a zzcmscpid cookie is used to access the zs/search.php endpoint. Recommendations For zzcms version 8.3, consider...

CVE-2018-18785: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php...

PT-2018-14655

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue exists in zzcms where SQL Injection is possible. This occurs in the zs/search.php file through the pxzs cookie. Recommendations For zzcms version 8.3, consider restricting access to the zs/search.php file...

Code injection

An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during "if" processing...

CVE-2018-18083

An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during "if" processing...

CVE-2018-18083

CVE-2018-18083 affects DuomiCMS 3.0. Affected component: search.php, where the parameter searchword is processed and unsafely uses eval during if processing, enabling remote PHP code execution. This yields high/severe impact (NVD CVSS3: 9.8, CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Exploit...

PT-2018-14338

Name of the Vulnerable Software and Affected Versions DuomiCMS version 3.0 Description An issue in DuomiCMS allows remote PHP code execution via the searchword parameter in the "search.php" endpoint. This is possible because the eval function is used during "if" processing. Recommendations For...

CVE-2018-18083: Improper Control of Generation of Code

An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during "if" processing...

onlinenigeria.com XSS vulnerability

Open Bug Bounty ID: OBB-678753 Description| Value ---|--- Affected Website:| onlinenigeria.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

newbethelgarner.org XSS vulnerability

Open Bug Bounty ID: OBB-678338 Description| Value ---|--- Affected Website:| newbethelgarner.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

klub31.ru XSS vulnerability

Open Bug Bounty ID: OBB-678050 Description| Value ---|--- Affected Website:| klub31.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...