124 matches found
CVE-2024-50969
CVE-2024-50969 説明 Code-projects Jonnys Liquor 1.0 の browse.php における反射型クロスサイトスクリプティング XSS の脆弱性により、リモート攻撃者が search パラメータを介して任意のウェブスクリプトまたは HTML を注入できる可能性があります。 脆弱性タイプ クロスサイトスクリプティング XSS 製品ベンダー Code-projects 影響を受ける製品コードベース:...
CVE-2021-47955: Improper Neutralization of Input During Web Page Generation
CouchCMS 2.2.1 contains a cross-site scripting vulnerability that allows authenticated attackers to execute arbitrary JavaScript by uploading malicious SVG files through the file upload functionality. Attackers can upload SVG files containing embedded script tags to the browse.php endpoint, which...
CVE-2021-47958
CouchCMS 2.2.1 contains a server-side request forgery vulnerability that allows authenticated attackers to make arbitrary HTTP requests by uploading malicious SVG files. Attackers can upload SVG files containing external entity references through the browse.php endpoint to access internal service...
CVE-2021-47958
CVE-2021-47958 affects CouchCMS 2.2.1 and is a server-side request forgery via SVG upload. An authenticated attacker can upload SVG files containing external entity references through the browse.php endpoint to trigger arbitrary HTTP requests from the server, enabling access to internal services ...
CVE-2021-47958: Server-Side Request Forgery (SSRF)
CouchCMS 2.2.1 contains a server-side request forgery vulnerability that allows authenticated attackers to make arbitrary HTTP requests by uploading malicious SVG files. Attackers can upload SVG files containing external entity references through the browse.php endpoint to access internal service...
EUVD-2009-0962
Malware in sbrugna...
EUVD-2005-2699
Malware in sbrugna...
EUVD-2005-2436
Malware in sbrugna...
EUVD-2009-3938
Malware in sbrugna...
EUVD-2006-1086
Malware in sbrugna...
EUVD-2008-1843
Malware in sbrugna...
EUVD-2005-0266
Malware in sbrugna...
EUVD-2014-4232
Malware in sbrugna...
EUVD-2002-0947
Malware in sbrugna...
EUVD-2008-3404
Malware in sbrugna...
CVE-2025-7196 code-projects Jonnys Liquor browse.php sql injection
A vulnerability was found in code-projects Jonnys Liquor 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /browse.php. The manipulation of the argument Search leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2025-7196 code-projects Jonnys Liquor browse.php sql injection
A vulnerability was found in code-projects Jonnys Liquor 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /browse.php. The manipulation of the argument Search leads to sql injection. The attack may be launched remotely. The exploit has been...
Code-Projects Jonnys Liquor 注入漏洞
jonnys Liquor is a content and management system. jonnys Liquor suffers from an SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Search in the file /browse.php. An attacker can exploit this vulnerability to execute illeg...
CVE-2025-7196: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Jonnys Liquor 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /browse.php. The manipulation of the argument Search leads to sql injection. The attack may be launched remotely. The exploit has been...