CVE-2019-20221

In Support Incident Tracker SiT! 3.67, Load Plugins input in the config.php page is affected by XSS. The XSS payload is, for example, executed on the about.php page...

PT-2020-10379

Name of the Vulnerable Software and Affected Versions Support Incident Tracker SiT! version 3.67 Description The issue affects the Load Plugins input in the config.php page, which is vulnerable to cross-site scripting XSS. The XSS payload can be executed on the about.php page. Recommendations For...

CVE-2019-20221: Improper Neutralization of Input During Web Page Generation

In Support Incident Tracker SiT! 3.67, Load Plugins input in the config.php page is affected by XSS. The XSS payload is, for example, executed on the about.php page...

CVE-2018-12055: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contactus.php, faq.php, about.php, photogallery.php, privacy.php, and so on...

PT-2018-10976

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Schools Alert Management Script affected versions not specified Description The issue concerns SQL Injections in PHP Scripts Mall Schools Alert Management Script. Specifically, the vulnerability exists via crafted POST data in...

Design/Logic Flaw

PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php...

CVE-2018-11487

PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php...

CVE-2018-11487

PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php...

CVE-2018-11487

CVE-2018-11487 affects PHPMyWind 5.5 with reflected Cross-Site Scripting (XSS) via the cid parameter to newsshow.php or via a query string to news.php or about.php. The vulnerability allows an attacker to inject and execute script in a victim’s browser when the affected pages are loaded. Root cau...

CVE-2018-11487: Improper Neutralization of Input During Web Page Generation

PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php...

PT-2018-10604

Name of the Vulnerable Software and Affected Versions PHPMyWind version 5.5 Description The issue concerns a security problem where an attacker can inject malicious code. This is possible through the cid parameter to the "newsshow.php" endpoint, or the query string to the "news.php" or "about.php...

radimpex.rs XSS vulnerability

Open Bug Bounty ID: OBB-556943 Description| Value ---|--- Affected Website:| radimpex.rs Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nanchinakasuji.com XSS vulnerability

Open Bug Bounty ID: OBB-472637 Description| Value ---|--- Affected Website:| nanchinakasuji.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

intrails.ch XSS vulnerability

Open Bug Bounty ID: OBB-472595 Description| Value ---|--- Affected Website:| intrails.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

zzcms最新版admin\about.php SQL injection

No description provided by source...

CMS Penang about.php parameter id SQL injection vulnerability

No description provided by source...

WEBONE CMS v6 about.php 参数pk SQL注入漏洞

No description provided by source...

Element C2 SQL Injection

---------------------------------------------------------------- Element C2 SQL Injection ---------------------------------------------------------------- Exploit Title: Element C2 SQL Injection Author: Hack Center Security Team Discovered By : Net.W0lf Software Link: www.elementc2.com Impact :...

Onepound(about.php) sql injection Vulnerability

Exploit for php platform in category web applications Exploit Title:Onepoundabout.php sql injection Vulnerability Date: 18/7/2011 Author: Angel Injection home Page: http://www.club-h.co.cc Email: Angel-InjectionathotmailDotcom Vendor or Software Link: www.onepound.cn Version: N/A Category:: webap...

Sulata iSoft Local File Disclosure

========================================================= Sulata iSoft stream.php Local File Disclosure Exploit ========================================================= Exploit Title : Sulata iSoft developer by Rizwan Azam you look site.com/about.php Date : 10 December 2010 Author : Suddendeath...