49 matches found
CVE-2026-10258
CVE-2026-10258 affects itsourcecode Content Management System 1.0. The vulnerability resides in the /admin/add_sub_topic.php file, where manipulating the topic_id parameter enables SQL injection in an unspecified function. The attack can be performed remotely, and public exploits are available. C...
EUVD-2026-33637
A weakness has been identified in itsourcecode Content Management System 1.0. Impacted is an unknown function of the file /admin/addsubtopic.php. This manipulation of the argument topicid causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available ...
CVE-2026-10242 itsourcecode Content Management System instructions.php sql injection
A weakness has been identified in itsourcecode Content Management System 1.0. This impacts an unknown function of the file /instructions.php. This manipulation of the argument topicid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the...
CVE-2026-10242: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in itsourcecode Content Management System 1.0. This impacts an unknown function of the file /instructions.php. This manipulation of the argument topicid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the...
CVE-2025-64519: Improper Neutralization of Special Elements used in an SQL Command
TorrentPier is an open source BitTorrent Public/Private tracker engine, written in php. In versions up to and including 2.8.8, an authenticated SQL injection vulnerability exists in the moderator control panel modcp.php. Users with moderator permissions can exploit this vulnerability by supplying...
EUVD-2012-5236
Malware in sbrugna...
EUVD-2007-3667
Malware in sbrugna...
EUVD-2004-2746
Malware in sbrugna...
EUVD-2003-0478
Malware in sbrugna...
EUVD-2003-0480
Malware in sbrugna...
EUVD-2008-5245
Malware in sbrugna...
Discourse 安全漏洞
Discourse is an open source community discussion platform from Discourse Open Source. The platform includes features such as communities, email, and chat rooms. A security vulnerability exists in Discourse 3.5.0 and earlier versions, which stems from an AI suggestion endpoint that does not proper...
CVE-2025-58055: Improper Access Control
Discourse is an open-source community discussion platform. In versions 3.5.0 and below, the Discourse AI suggestion endpoints for topic “Title”, “Category”, and “Tags” allowed authenticated users to extract information about topics that they weren’t authorized to access. By modifying the “topicid...
CVE-2004-2756
Cross-site scripting XSS vulnerability in viewtopic.php in Xoops 2.x, possibly 2 through 2.0.5, allows remote attackers to inject arbitrary web script or HTML via the 1 forum and 2 topicid parameters...
osTicket 安全漏洞
osTicket is a widely used and trusted open source support work order system from osTicket. A security vulnerability exists in osTicket version 1.17.5 and earlier, which stems from a combination of the keywords and topicid parameters in the search function of the tickets.php page that results in S...
CVE-2025-26241: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket =1.17.5 allows authenticated attackers to execute arbitrary SQL commands via the "keywords" and "topicid" URL parameters combination...
CVE-2021-45811: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket 1.15.x allows authenticated attackers to execute arbitrary SQL commands via the "keywords" and "topicid" URL parameters combination...
Fanwe O2O商业系统index.php处的POST参数topic_id存在SQL注入漏洞
No description provided by source...
