CVE-2018-20565: Improper Neutralization of Input During Web Page Generation

An issue was discovered in DouCo DouPHP 1.5 20181221. admin/nav.php?rec=update has XSS via the navname parameter...

PT-2018-15435

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP, where the "admin/nav.php?rec=update" endpoint has a cross-site scripting XSS issue via the nav name parameter. Recommendations For DouPHP version 1.5 20181221,...

CVE-2006-5108: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitrary web script or HTML via the orderid parameter in 1 admin/printorder.php and 2 vieworder.php; the 3 siteurl and 4 lasearchhome parameters and 5 certain language parameters in...