11 matches found
Exploit for CVE-2026-88854
CVE-2026-88854 — OrdaSoft Joomla Gallery SQL Injection Python...
CVE-2026-88854 Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7
Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...
CVE-2026-88854: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...
CVE-2026-1589
A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknown function of the file /ramonsys/inquiry/index.php. This manipulation of the argument txtsearch causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed an...
EUVD-2004-2615
Malware in sbrugna...
CVE-2005-4255
Cross-site scripting XSS vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded phrase parameter...
CVE-2005-4255
Cross-site scripting XSS vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded phrase parameter...
CVE-2005-4255: Undefined Security Weakness
Cross-site scripting XSS vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded phrase parameter...
CVE-2004-2624
CVE-2004-2624: WackoWiki 3.5 contains a cross-site scripting (XSS) flaw in the TextSearch feature. The vulnerability enables injection of arbitrary script/HTML via the phrase parameter, allowing remote attackers to execute client-side code in affected pages. Documents consistently identify WackoW...
CVE-2004-2624: Undefined Security Weakness
Cross-site scripting XSS vulnerability in "TextSearch" in WackoWiki 3.5 allows remote attackers to inject arbitrary web script or HTML via the "phrase" parameter...