12 matches found
EUVD-2005-0883
Malware in sbrugna...
EUVD-2023-43708
Malicious code in bioql PyPI...
CVE-2023-3016
A vulnerability was found in yiwent Vip Video Analysis 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/admincore.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to th...
Cross site scripting
A vulnerability, which was classified as problematic, was found in BeipyVideoResolution up to 2.6. Affected is an unknown function of the file admin/admincore.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2023-3016
CVE-2023-3016 affects yiwent Vip Video Analysis 1.0. The vulnerability is in the admin/admincore.php component and is a cross-site scripting flaw. The issue can be triggered remotely and an exploit has been disclosed publicly. Several connected sources note no confirmed vendor patch/version updat...
CVE-2023-3014 BeipyVideoResolution admincore.php cross site scripting
A vulnerability, which was classified as problematic, was found in BeipyVideoResolution up to 2.6. Affected is an unknown function of the file admin/admincore.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2023-3014
BeipyVideoResolution (
BirdBlog 1.4 /admin/admincore.php msg Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21184/info BirdBlog is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...
CVE-2006-6211
Multiple cross-site scripting XSS vulnerabilities in BirdBlog 1.4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 msg parameter to a admin/admincore.php, the 2 month parameter to b admin/comments.php or c admin/entries.php, or the 3 page parameter to d admin/logs.php,...
CVE-2005-0882
SQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the 1 userid or 2 userpw parameters...
CVE-2005-0882
SQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the 1 userid or 2 userpw parameters...
CVE-2005-0882
CVE-2005-0882 describes a SQL injection vulnerability in BirdBlog’s admincore.php prior to version 1.2.0, where remote attackers can execute arbitrary SQL commands through the (1) userid or (2) userpw parameters. The underlying issue is unsafe handling/concatenation of user input, enabling partia...