CVE-2023-50470

Summary of CVE-2023-50470 : Multiple sources document a cross-site scripting (XSS) vulnerability in SeaCMS v12.8 affecting the component described as admin_Video.php or admin_ Video.php, allowing an attacker to inject arbitrary web scripts/HTML via a crafted payload. The issue stems from insuffic...

CVE-2022-2633

The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'dl' parameter found in the /public/video.php file in versions up to, and including 2.6.0. This makes it possible for unauthenticated users to download sensiti...

PHP Melody 3.0 - (vid) SQL Injection Vulnerability

Exploit Title: PHP Melody 3.0 - 'vid' SQL Injection Vendor Homepage: https://www.phpsugar.com/phpmelody.html Version: v3 Product & Service Introduction: =============================== Upload, import, stream or embed any media. The smart way to manage audio & video. Comes with all the tools you...

PHP Melody 3.0 SQL Injection

Document Title: =============== PHP Melody v3.0 - vid SQL Injection Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2295 Bulletin: https://www.phpsugar.com/blog/2021/09/php-melody-3-0-vulnerability-report-fix/ Release Date: =============...

hadjiyiannis.net XSS vulnerability

Open Bug Bounty ID: OBB-610802 Description| Value ---|--- Affected Website:| hadjiyiannis.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

profitwizardpro.com XSS vulnerability

Open Bug Bounty ID: OBB-569595 Description| Value ---|--- Affected Website:| profitwizardpro.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

coyhwh.com XSS vulnerability

Vulnerable URL: http://www.coyhwh.com/en/video.php?play=1/-///'/"//--...

garnstudio.com XSS vulnerability

Vulnerable URL: http://www.garnstudio.com/video.php/'"--!...

Woltlab Burning Board FLVideo Addon (video.php, value param) - SQL Injection

No description provided by source...

FineCMS 2.3.x 本地文件包含漏洞

简要描述： FineCMS2.3.x版本一文件中存在本地文件包含漏洞。需要在能截断的环境中使用。 详细说明： palyer/video.php player目录下的video.php 中存在本地文件包含漏洞（必须能支持截断的环境才能使用）。漏洞形成原因见 video.php 的98到100行代码。 $filename='./Models/'.$type.'Model.php'; iffileexists$filename includeonce$filename; 其中$type=$GET'vtype'; 漏洞证明： 在windows环境中测试的。...

Sql injection

SQL injection vulnerability in video.php in Get Tube 4.51 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4934

CVE-2010-4934 : SQL injection in Get Tube

CVE-2010-4934

SQL injection vulnerability in video.php in Get Tube 4.51 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-4958

SQL injection vulnerability in video.php in EMO Breeder Manager aka EMO Breader Manager allows remote attackers to execute arbitrary SQL commands via the idd parameter...

CVE-2009-4958

The CVE-2009-4958 entry concerns an SQL injection in the EMO Breeder Manager application (also called EMO Breader Manager). The vulnerability is triggered in video.php via the idd parameter, allowing an attacker to manipulate SQL execution on the backend. Affected detail from connected sources co...

CVE-2010-2459

SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to execute arbitrary SQL commands via the videoid parameter...

Sql injection

SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to execute arbitrary SQL commands via the videoid parameter...

CVE-2010-2458

CVE-2010-2458 is an XSS vulnerability in the 2daybiz Video Community Portal Script 1.0, exploitable via the videoid parameter in video.php. The root cause is unsanitized input leading to arbitrary script execution if an attacker injects HTML/script. Public references describe the vulnerability an...

EMO Breader Manager - video.php?movie SQL Injection

EMO Breader Manager - video.php?movie SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability video.php movie EMO Breader Manager http://www.emophp.com AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

EMO Breader Manager (video.php movie) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= EMO Breader Manager video.php movie SQL Injection Vulnerability ================================================================= Remote SQL Injection Vulnerability video.ph...