Lucene search
+L

9 matches found

Kitploit
Kitploit
•added 2026/09/27 4:24 a.m.•13 views

CVE-2023-43875-Subrion-CMS-Reflected-XSS---Installation

Subrion CMS XSS Reflejado v4.2.1 Autor: Sergio Descripción: Múltiples vulnerabilidades de Cross-Site Scripting XSS en la instalación de Subrion CMS v.4.2.1 permiten a un atacante local ejecutar scripts web arbitrarios mediante un payload manipulado inyectado en dbhost, dbname, dbuser, adminuserna...

6.1CVSS6.7AI score0.00764EPSS
SaveExploits1
Snyk
Snyk
•added 2026/03/06 7:14 a.m.•15 views

Malicious Package

Overview sap-adminemail is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
SaveExploits0References2
OSV
OSV
•added 2024/10/16 1:17 p.m.•12 views

MAL-2024-9815 Malicious code in sap-adminemail (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/10/16 1:17 p.m.•13 views

Malicious code in sap-adminemail (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2023/10/20 12:30 a.m.•78 views

GHSA-646R-8FCC-P82R Subrion CMS vulnerable to Cross-site Scripting

Multiple Cross-Site Scripting XSS vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, dbname, dbuser, adminusername and adminemail...

6.1CVSS6AI score0.00764EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/19 12:00 a.m.•1 views

CVE-2023-43875: Improper Neutralization of Input During Web Page Generation

Multiple Cross-Site Scripting XSS vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, dbname, dbuser, adminusername and adminemail...

6.1CVSS6.8AI score0.00764EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2010/04/23 12:00 a.m.•44 views

CmS 5.0 SQL Injection

----------------------------------------------------------------------- CmS id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : spykit Site : http://devilzc0de.org/ Date : April, 22-2010 Location : Jakarta, Indonesia Time Zone : GMT +7:0...

7.4AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/05/01 12:00 a.m.•5 views

CVE-2009-1512: Improper Control of Generation of Code

Static code injection vulnerability in X-Forum 0.6.2 allows remote authenticated administrators to inject arbitrary PHP code into Config.php via the adminEMail parameter to SaveConfig.php...

6.5CVSS6AI score0.03951EPSS
SaveExploits1References2
zdt
zdt
•added 2007/12/24 12:00 a.m.•25 views

MeGaCheatZ 1.1 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ MeGaCheatZ 1.1 Multiple Remote SQL Injection Vulnerabilities ============================================================...

7.1AI score
SaveExploits0
Rows per page
Query Builder