77 matches found
EUVD-2005-3037
Malware in sbrugna...
📄 Kion Exchange Programs Software 1.21.9092.29966 Cross Site Scripting
Kion Exchange Programs Software versions 1.21.9092.29966 and below suffer from a cross site scripting vulnerability. Exploit Title: Kion Exchange Programs Software Reflected XSS CVE: CVE-2024-7130 PoC-Date: 2025-05-28 Exploit Author: Kutay ERGEN Vendor Homepage: https://www.kionexchangeprograms.c...
CVE-2023-27568: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability inSpryker Commerce OS 0.9 that allows for access to sensitive data via customer/order?orderSearchFormsearchText=...
PHP Scripts Mall advanced-real-estate-script cross-site scripting vulnerability
PHP Scripts Mall advanced-real-estate-script is a real estate website system script by PHP Scripts Mall India. A cross-site scripting vulnerability exists in the 'searchtext' parameter of the search-results.php file in PHP Scripts Mall advanced-real-estate-script version 4.0.9. The vulnerability...
CVE-2019-20336: Improper Neutralization of Input During Web Page Generation
In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS...
CVE-2019-9207
PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter. NOTE: This product is discontinued...
CVE-2019-9207
CVE-2019-9207 affects PRTG Network Monitor 7.1.3.3378 . The vulnerability is an XSS flaw exploitable via the /search.htm endpoint using the searchtext parameter. Public records consistently describe a cross-site scripting vulnerability in this version; the product is noted as discontinued. The co...
CVE-2019-9207
PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter. NOTE: This product is discontinued...
CVE-2019-9207: Improper Neutralization of Input During Web Page Generation
PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter. NOTE: This product is discontinued...
The vulnerability of the eDocLib platform for storing and processing corporate data arises from the lack of measures taken to protect the website structure. This vulnerability allows attackers to carry out cross-site scripting attacks.
The vulnerability of the eDocLib platform for storing and processing corporate data exists due to the lack of measures taken to protect the structure of its web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the user’s browser by placing it in a speciall...
Code injection
An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SolutionSearch.do searchText parameter...
CVE-2019-12541: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SolutionSearch.do searchText parameter...
Paessler AG PRTG Network Monitor Cross-Site Scripting Vulnerability
Paessler AG PRTG Network Monitor is a full-featured network monitoring and management software from Paessler AG, Germany. A cross-site scripting vulnerability exists in Paessler AG PRTG Network Monitor version 7.1.3.3378, which can be exploited by a remote attacker to inject arbitrary web script ...
Paessler AG PRTG Network Monitor Cross-Site Scripting Vulnerability
Paessler AG PRTG Network Monitor is a full-featured network monitoring and management software from Paessler AG, Germany. A cross-site scripting vulnerability exists in Paessler AG PRTG Network Monitor version 7.1.3.3378. The vulnerability can be exploited by a remote attacker to inject arbitrary...
CVE-2018-7313
SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter...
Sql injection
SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter...
CVE-2018-7313
SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter...
CVE-2018-7313
SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter...
CVE-2018-7313: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter...