62 matches found
CVE-2020-25495
A reflected Cross-site scripting XSS vulnerability in Xinuo formerly SCO Openserver version 5 and 6 allows remote attackers to inject arbitrary web script or HTML tag via the parameter 'section'...
CuppaCMS Cross-Site Scripting Vulnerability
CuppaCMS is a content management system CMS. A cross-site scripting vulnerability exists in CuppaCMS 2018-09-03 and prior versions. A remote attacker can exploit the vulnerability by sending the 'section' parameter to the administrator//component/tablemanager/view/cumenus URL to inject malicious...
Moodle 2.0.x < 2.0.5 / 2.1.x < 2.1.2 Multiple Vulnerabilities
Binary data 8713.prm...
Galore Simple Shop 3.1 - 'section' Parameter SQL Injection Vulnerability
No description provided by source...
CVE-2013-0807
Cross-site scripting XSS vulnerability in the NewSectionPrompt function in include/tool/editingpage.php in gpEasy CMS 3.5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the section parameter in a newsection action to index.php...
Cross site scripting
Cross-site scripting XSS vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the section parameter...
CVE-2011-4307
Cross-site scripting XSS vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the section parameter...
CVE-2011-4307
Cross-site scripting XSS vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the section parameter...
PT-2012-1855 · Moodle · Moodle
Name of the Vulnerable Software and Affected Versions: Moodle versions 2.0.x through 2.0.4 Moodle versions 2.1.x through 2.1.1 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the section parameter in the /mod/wiki/lang/en/wiki.php...
Sql injection
SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the section parameter...
CVE-2010-4999
SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the section parameter...
CVE-2009-4934
Cross-site scripting XSS vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...
CVE-2009-4934
Cross-site scripting XSS vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...
Sql injection
SQL injection vulnerability in include/getread.php in Extensible-BioLawCom CMS X-BLC 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the section parameter...
CVE-2008-6385
Cross-site scripting XSS vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...
CVE-2008-6385
Cross-site scripting XSS vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Fred Stuurman SyndeoCMS 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...