EUVD-2020-13792

Malware in sbrugna...

CVE-2022-24585

A stored cross-site scripting XSS vulnerability in the component /core/admin/comment.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the author parameter...

CVE-2020-21013

emlog v6.0.0 contains a SQL injection via /admin/comment.php...

CVE-2020-21013: Improper Neutralization of Special Elements used in an SQL Command

emlog v6.0.0 contains a SQL injection via /admin/comment.php...

PT-2021-10574

Name of the Vulnerable Software and Affected Versions: emlog version 6.0.0 Description: The issue is a SQL injection that can be exploited via the /admin/comment.php API endpoint. This allows for potential unauthorized access or manipulation of database content. Recommendations: For emlog version...

PT-2019-9475

Name of the Vulnerable Software and Affected Versions e107 version 2.1.9 Description An issue was discovered that allows for a XSS attack. The attack is specifically targeted at the e107 admin/comment.php endpoint. Recommendations For version 2.1.9, update to a newer version that contains a fix f...