CVE-2022-42747

CandidATS version 3.0.0 on 'sortBy' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the application application does not properly validate user input against XSS attacks...

CVE-2025-15375

A flaw has been found in EyouCMS up to 1.7.7. The impacted element is the function unserialize of the file application/api/controller/Ajax.php of the component arcpagelist Handler. Executing a manipulation of the argument attstr can lead to deserialization. The attack can be launched remotely. Th...

CVE-2025-15375

A flaw has been found in EyouCMS up to 1.7.7. The impacted element is the function unserialize of the file application/api/controller/Ajax.php of the component arcpagelist Handler. Executing a manipulation of the argument attstr can lead to deserialization. The attack can be launched remotely. Th...

CVE-2025-15375

A flaw has been found in EyouCMS up to 1.7.7. The impacted element is the function unserialize of the file application/api/controller/Ajax.php of the component arcpagelist Handler. Executing a manipulation of the argument attstr can lead to deserialization. The attack can be launched remotely. Th...

EyouCMS 代码问题漏洞

EyouCMS is an open source content management system CMS based on ThinkPHP by China Eyou Eyou. A code issue vulnerability exists in EyouCMS 1.7.7 and earlier versions, which stems from incorrect manipulation of the parameter attstr in the file application/api/controller/Ajax.php, which could lead ...

PT-2025-50754

Name of the Vulnerable Software and Affected Versions Purei CMS version 1.0 Description Purei CMS version 1.0 contains a time-based blind SQL injection vulnerability. Attackers can manipulate database queries through unfiltered user input parameters. The vulnerability can be exploited through...

CVE-2025-13270 Campcodes School Fees Payment Management System ajax.php sql injection

A vulnerability was found in Campcodes School Fees Payment Management System 1.0. This affects an unknown function of the file /ajax.php?action=savecourse. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could...

EUVD-2015-6484

Malware in sbrugna...

EUVD-2018-17423

Malware in sbrugna...

EUVD-2010-3207

Malware in sbrugna...

EUVD-2015-9285

Malware in sbrugna...

EUVD-2018-8136

Malware in sbrugna...

EUVD-2015-9266

Malware in sbrugna...

EUVD-2015-9291

Malware in sbrugna...

EUVD-2012-2503

Malware in sbrugna...

EUVD-2017-9729

Malware in sbrugna...

EUVD-2018-16996

Malware in sbrugna...

EUVD-2018-10433

Malware in sbrugna...

EUVD-2010-4254

Malware in sbrugna...

EUVD-2012-0107

Malware in sbrugna...