Lucene search
K

18 matches found

EUVD
EUVD
added 2026/03/12 6:30 p.m.0 views

EUVD-2019-19796

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the poll parameter. Attackers can send POST requests to arama.php with malicious SQL payloads in the poll parameter ...

8.8CVSS5.9AI score0.001EPSS
Exploits1References3
NVD
NVD
added 2026/03/12 4:16 p.m.1 views

CVE-2019-25518

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the poll parameter. Attackers can send POST requests to arama.php with malicious SQL payloads in the poll parameter ...

8.8CVSS0.001EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2026/02/23 7:25 p.m.3 views

CVE-2019-25460

Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' GET parameter. Attackers can send requests to the arama endpoint with malicious 'q' values using time-based SQL...

8.8CVSS5.7AI score0.00106EPSS
Exploits1References1
NVD
NVD
added 2026/02/22 3:16 p.m.1 views

CVE-2019-25460

Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' GET parameter. Attackers can send requests to the arama endpoint with malicious 'q' values using time-based SQL...

8.8CVSS0.00106EPSS
Exploits1References3
OSV
OSV
added 2026/02/22 3:16 p.m.1 views

CVE-2019-25460

Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' GET parameter. Attackers can send requests to the arama endpoint with malicious 'q' values using time-based SQL...

7.5CVSS5.9AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/02/22 2:12 p.m.2 views

CVE-2019-25460 Web Ofisi Platinum E-Ticaret v5 SQL Injection via q Parameter

Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' GET parameter. Attackers can send requests to the arama endpoint with malicious 'q' values using time-based SQL...

8.8CVSS5.7AI score0.00106EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/02/22 2:12 p.m.2 views

CVE-2019-25460

Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' GET parameter. Attackers can send requests to the arama endpoint with malicious 'q' values using time-based SQL...

8.8CVSS5.9AI score0.00106EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2026/02/22 2:12 p.m.6 views

CVE-2019-25460

Affected software : Web Ofisi Platinum E-Ticaret v5. Vulnerability : SQL injection allowing unauthenticated attackers to manipulate queries via the 'q' GET parameter on the arama endpoint, using time-based techniques to extract data. Root cause / method : improper input handling enabling time-bas...

8.8CVSS5.9AI score0.00106EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2026/02/22 2:12 p.m.22 views

CVE-2019-25460 Web Ofisi Platinum E-Ticaret v5 SQL Injection via q Parameter

Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' GET parameter. Attackers can send requests to the arama endpoint with malicious 'q' values using time-based SQL...

8.8CVSS0.00106EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/02/22 12:0 a.m.4 views

PT-2026-21447

Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' GET parameter. Attackers can send requests to the arama endpoint with malicious 'q' values using time-based SQL...

8.8CVSS5.9AI score0.00106EPSS
Exploits1References4
Openbugbounty
Openbugbounty
added 2018/04/26 6:22 p.m.15 views

muhasebeburosu.com XSS vulnerability

Open Bug Bounty ID: OBB-608897 Description| Value ---|--- Affected Website:| muhasebeburosu.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Exploits0
Openbugbounty
Openbugbounty
added 2016/05/20 8:6 p.m.8 views

ebrarbilgisayar.com XSS vulnerability

Vulnerable URL: http://www.ebrarbilgisayar.com/arama?tip=1="/alert/openbugbounty/...

6.9AI score
Exploits0
Openbugbounty
Openbugbounty
added 2016/04/04 6:20 p.m.10 views

n11.com XSS vulnerability

Vulnerable URL: http://www.n11.com/arama?q="/alert/xssposed/...

6.9AI score
Exploits0
Packet Storm
Packet Storm
added 2011/07/15 12:0 a.m.23 views

JaydeOnline Search Engine Cross Site Scripting

JaydeOnline Search Engine XSS Vulnerability Author : SOLVER Bug Researchers Date : 13.06.2011 Name : Jayde Online Network Bug Type : XSS Cross Site Scripting Infection : Hedef sistem uzerinde zararli Javascript kodlari calistirilabilir. Explanation : JaydeOnline arama motoru sistemini kullanan we...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2010/01/05 12:0 a.m.27 views

Online Muzik Arama Cross Site Scripting

======================================================================================== | Title : Online Müzik Arama XSS Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : 2 | High : 1...

7.4AI score
Exploits0
xssed
xssed
added 2008/05/24 12:0 a.m.10 views

Unfixed XSS vulnerability at www.web-arama.net

Security researcher SeYMeN, has submitted on 24/05/2008 a cross-site-scripting XSS vulnerability affecting www.web-arama.net, which at the time of submission ranked 673556 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/05/2008. It is...

6.6AI score
Exploits0References1
securityvulns
securityvulns
added 2008/02/26 12:0 a.m.75 views

Powered by Pagetool Ver (1.04-05-06-07)

Google arama : www.1923turk.org Turkishwariorr Powered by Pagetool Ver 1.04 Powered by Pagetool Ver 1.07 Powered by Pagetool Ver 1.05 Powered by Pagetool Ver 1.06 Site sonuna :...

2.3AI score
Exploits0
Packet Storm
Packet Storm
added 2007/07/25 12:0 a.m.24 views

philboard-xss.txt

------=Part11316726183988.1185316931798 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline W1L3D4 Philboard v0.3 XSS Vulnerability Software: W1L3D4 Philboard v0.3 download: http://www.aspindir.com/goster/4891 demo:...

7.4AI score
Exploits0
Rows per page
Query Builder