Lucene search
+L

9 matches found

Kitploit
Kitploit
•added 2026/10/18 4:25 a.m.•21 views

CVE-2023-43875-Subrion-CMS-Reflected-XSS---Installation

Subrion CMS Reflected XSS v4.2.1 Author: Sergio Description: Multiple Cross-Site Scripting XSS vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, dbname, dbuser, adminusername and...

6.1CVSS7AI score0.00764EPSS
SaveExploits1
Snyk
Snyk
•added 2026/03/06 7:14 a.m.•18 views

Malicious Package

Overview sap-adminemail is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/10/16 1:17 p.m.•17 views

Malicious code in sap-adminemail (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2024/10/16 1:17 p.m.•19 views

MAL-2024-9815 Malicious code in sap-adminemail (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
osv_ghsa
osv_ghsa
•added 2023/10/20 12:30 a.m.•87 views

GHSA-646R-8FCC-P82R Subrion CMS vulnerable to Cross-site Scripting

Multiple Cross-Site Scripting XSS vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, dbname, dbuser, adminusername and adminemail...

6.1CVSS6AI score0.00764EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/19 12:00 a.m.•8 views

CVE-2023-43875: Improper Neutralization of Input During Web Page Generation

Multiple Cross-Site Scripting XSS vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, dbname, dbuser, adminusername and adminemail...

6.1CVSS6.8AI score0.00764EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2010/04/23 12:00 a.m.•47 views

CmS 5.0 SQL Injection

----------------------------------------------------------------------- CmS id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : spykit Site : http://devilzc0de.org/ Date : April, 22-2010 Location : Jakarta, Indonesia Time Zone : GMT +7:0...

7.4AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/05/01 12:00 a.m.•13 views

CVE-2009-1512: Improper Control of Generation of Code

Static code injection vulnerability in X-Forum 0.6.2 allows remote authenticated administrators to inject arbitrary PHP code into Config.php via the adminEMail parameter to SaveConfig.php...

6.5CVSS6AI score0.03951EPSS
SaveExploits1References2
zdt
zdt
•added 2007/12/24 12:00 a.m.•30 views

MeGaCheatZ 1.1 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ MeGaCheatZ 1.1 Multiple Remote SQL Injection Vulnerabilities ============================================================...

7.1AI score
SaveExploits0
Rows per page
Query Builder