CVE-2021-45281: Improper Neutralization of Input During Web Page Generation

QuickBox Pro v2.4.8 contains a cross-site scripting XSS vulnerability at "adminuseredit.php?usertoedit=XSS", as the user supplied input for the value of this parameter is not properly sanitized...

PT-2022-12318

Name of the Vulnerable Software and Affected Versions QuickBox Pro version 2.4.8 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability occurs at the "adminuseredit.php?usertoedit=XSS" endpoint, where user-supplied input for the usertoedit parameter is no...

Sql injection

Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the logid parameter to admin/editgroup.php...

CVE-2017-15949: Improper Neutralization of Special Elements used in an SQL Command

Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the logid parameter to admin/editgroup.php...

PT-2017-14306

Name of the Vulnerable Software and Affected Versions Xavier PHP Management Panel version 2.4 Description The issue allows SQL injection via the usertoedit parameter to "admin/adminuseredit.php" or the log id parameter to "admin/editgroup.php". Recommendations For Xavier PHP Management Panel...