41 matches found
Sql injection
Stivasoft Phpjabbers Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoad function...
Sql injection
Stivasoft Phpjabbers Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionSetAmount function...
Cross site scripting
Stivasoft Phpjabbers Fundraising Script v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the pjActionLoadCss function...
Sql injection
Stivasoft Phpjabbers Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoadForm function...
Cross site scripting
Stivasoft Phpjabbers Fundraising Script v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the pjActionPreview function...
CVE-2020-22226
CVE-2020-22226 affects the Stivasoft (Phpjabbers) Fundraising Script v1.0, with a SQL injection in the function pjActionSetAmount. The vulnerability allows an attacker to inject arbitrary SQL commands via a remote network attack (no authentication, no user interaction). NVD CVSS3.1 base score 9.8...
CVE-2020-22226
Stivasoft Phpjabbers Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionSetAmount function...
CVE-2020-22225
Stivasoft Phpjabbers Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoadForm function...
CVE-2020-22225
The CVE-2020-22225 issue concerns Stivasoft (Phpjabbers) Fundraising Script v1.0, where a SQL injection vulnerability exists in the pjActionLoadForm function. This is the underlying root cause: input handling in pjActionLoadForm allows arbitrary SQL to be executed by an unauthenticated or remote ...
CVE-2020-22224
CVE-2020-22224 affects Stivasoft (Phpjabbers) Fundraising Script v1.0. The vulnerability is a Cross-Site Scripting (XSS) in the pjActionPreview function. Root cause: improper handling in the affected component leads to script injection. Impact stated by NVD includes partial integrity impact with ...
CVE-2020-22224
Stivasoft Phpjabbers Fundraising Script v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the pjActionPreview function...
CVE-2020-22223
The CVE-2020-22223 entry concerns Stivasoft/Phpjabbers Fundraising Script v1.0, with a SQL injection vulnerability exploitable via the pjActionLoad function. Multiple connected sources (Red Hat, CNVD, PR ION, CVE lists, etc.) confirm an SQL injection vulnerability that could allow a remote attack...
CVE-2020-22223
Stivasoft Phpjabbers Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoad function...
CVE-2020-22222
Stivasoft Phpjabbers Fundraising Script v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the pjActionLoadCss function...
CVE-2020-22222
CVE-2020-22222 affects Stivasoft (Phpjabbers) Fundraising Script v1.0, with a cross-site scripting (XSS) vulnerability exploitable via the pjActionLoadCss function. The linked records confirm this is a PHP-based donation script and identify the vulnerable component as pjActionLoadCss. The NVD ent...
Simple CMS PHPJabbers Stivasoft 4.0 Database Disclosure
Exploit Title : Simple CMS PHPJabbers Stivasoft 4.0 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 17/12/2018 Vendor Homepage : phpjabbers.com stivasoft.com racingriverwebs.com Software Download Link : phpjabbers.com/simple-cms/ Demo...
StivaSoft PHPJabbers File Sharing Script Cross-Site Scripting Vulnerability
StivaSoft PHPJabbers File Sharing Script is a set of online file sharing scripts from the Bulgarian company StivaSoft. A cross-site scripting vulnerability exists in the comments section of StivaSoft PHPJabbers File Sharing Script. A remote attacker can exploit this vulnerability to inject...
StivaSoft PHPJabbers Star Rating Script Cross-Site Scripting Vulnerability
StivaSoft PHPJabbers Star Rating Script is a set of online rating scripts from StivaSoft Bulgaria. A cross-site scripting vulnerability exists in StivaSoft PHPJabbers Star Rating Script. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via rating entries...
StivaSoft PHPJabbers Night Club Booking Software Cross-Site Scripting Vulnerability
StivaSoft PHPJabbers Night Club Booking Software is a club booking management software from the Bulgarian company StivaSoft. A cross-site scripting vulnerability exists in the 'name' parameter in the reservations tag in StivaSoft PHPJabbers Night Club Booking Software. A remote attacker can explo...
StivaSoft PHPJabbers PHP Newsletter Script Cross-Site Scripting Vulnerability
StivaSoft PHPJabbers PHP Newsletter Script is a set of news system scripts from the Bulgarian company StivaSoft. admin panel is one of the administration panels. A cross-site scripting vulnerability exists in the lists of the admin panel of StivaSoft PHPJabbers PHP Newsletter Script. A remote...