47 matches found
PT-2024-31210 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: Seacms version 13 Description: The issue is related to Cross Site Scripting XSS via the admin-video.php endpoint. This allows for potential malicious script execution. No information is provided about the estimated number of potentially...
CVE-2024-0482
A vulnerability classified as critical has been found in Taokeyun up to 1.0.5. This affects the function index of the file application/index/controller/app/Video.php of the component HTTP POST Request Handler. The manipulation of the argument cid leads to sql injection. It is possible to initiate...
CVE-2024-0482 Taokeyun HTTP POST Request Video.php index sql injection
A vulnerability classified as critical has been found in Taokeyun up to 1.0.5. This affects the function index of the file application/index/controller/app/Video.php of the component HTTP POST Request Handler. The manipulation of the argument cid leads to sql injection. It is possible to initiate...
CVE-2024-0482
Summary of findings (CVE-2024-0482): Taokeyun up to 1.0.5 is affected by a vulnerability in the HTTP POST Request Handler, specifically the function index within Video.php. The issue arises from manipulating the parameter cid , leading to an SQL injection. The vulnerability is exploitable remotel...
PT-2024-15599 · Taokeyun · Taokeyun
Name of the Vulnerable Software and Affected Versions: Taokeyun versions up to 1.0.5 Description: A critical issue has been found in the HTTP POST Request Handler component, specifically affecting the function index of the file application/index/controller/app/Video.php. The manipulation of the c...
CVE-2023-50470
A cross-site scripting XSS vulnerability in the component admin Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2023-50470
A cross-site scripting XSS vulnerability in the component admin Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2023-50470
Summary of CVE-2023-50470 : Multiple sources document a cross-site scripting (XSS) vulnerability in SeaCMS v12.8 affecting the component described as admin_Video.php or admin_ Video.php, allowing an attacker to inject arbitrary web scripts/HTML via a crafted payload. The issue stems from insuffic...
CVE-2022-2633
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'dl' parameter found in the /public/video.php file in versions up to, and including 2.6.0. This makes it possible for unauthenticated users to download sensiti...
PHP Melody 3.0 - (vid) SQL Injection Vulnerability
Exploit Title: PHP Melody 3.0 - 'vid' SQL Injection Vendor Homepage: https://www.phpsugar.com/phpmelody.html Version: v3 Product & Service Introduction: =============================== Upload, import, stream or embed any media. The smart way to manage audio & video. Comes with all the tools you...
PHP Melody 3.0 SQL Injection
Document Title: =============== PHP Melody v3.0 - vid SQL Injection Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2295 Bulletin: https://www.phpsugar.com/blog/2021/09/php-melody-3-0-vulnerability-report-fix/ Release Date: =============...
hadjiyiannis.net XSS vulnerability
Open Bug Bounty ID: OBB-610802 Description| Value ---|--- Affected Website:| hadjiyiannis.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
profitwizardpro.com XSS vulnerability
Open Bug Bounty ID: OBB-569595 Description| Value ---|--- Affected Website:| profitwizardpro.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
coyhwh.com XSS vulnerability
Vulnerable URL: http://www.coyhwh.com/en/video.php?play=1/-///'/"//--...
garnstudio.com XSS vulnerability
Vulnerable URL: http://www.garnstudio.com/video.php/'"--!...
Woltlab Burning Board FLVideo Addon (video.php, value param) - SQL Injection
No description provided by source...
FineCMS 2.3.x 本地文件包含漏洞
简要描述： FineCMS2.3.x版本一文件中存在本地文件包含漏洞。需要在能截断的环境中使用。 详细说明： palyer/video.php player目录下的video.php 中存在本地文件包含漏洞（必须能支持截断的环境才能使用）。漏洞形成原因见 video.php 的98到100行代码。 $filename='./Models/'.$type.'Model.php'; iffileexists$filename includeonce$filename; 其中$type=$GET'vtype'; 漏洞证明： 在windows环境中测试的。...
Sql injection
SQL injection vulnerability in video.php in Get Tube 4.51 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...