CVE-2024-50969

CVE-2024-50969 affects Code-projects Jonnys Liquor 1.0 in browse.php, where a reflected XSS is possible via the search parameter. The vulnerability allows remote attackers to inject arbitrary scripts/HTML. Documents indicate this is a reflected XSS with user interaction required; no official patc...

CVE-2024-50969: Improper Neutralization of Input During Web Page Generation

A Reflected cross-site scripting XSS vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote attackers to inject arbitrary web scripts or HTML via the search parameter...

PT-2024-34478 · Unknown · Code-Projects Jonnys Liquor

Name of the Vulnerable Software and Affected Versions: Code-projects Jonnys Liquor version 1.0 Description: A Reflected cross-site scripting XSS vulnerability in browse.php allows remote attackers to inject arbitrary web scripts or HTML via the search parameter. This issue enables attackers to...

alamosrealty.com XSS vulnerability

Open Bug Bounty ID: OBB-650691 Description| Value ---|--- Affected Website:| alamosrealty.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pdb.finkproject.org XSS vulnerability

Vulnerable URL: http://pdb.finkproject.org/pdb/////browse.php?summary=...

space-industry.com XSS vulnerability

Vulnerable URL: http://space-industry.com/directory/browse.php?cid=1"';--=15=Worldwide Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| ...

hadith.com XSS vulnerability

Vulnerable URL: http://hadith.com/browse.php?cid="alert/OPENBUGBOUNTY/...

citycornerpaper.com XSS vulnerability

Vulnerable URL: http://www.citycornerpaper.com/browse.php?cid="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...

phpMyRecipes category parameter SQL injection vulnerability

phpMyRecipes is a simple web-based recipe storage and retrieval application. A SQL injection vulnerability exists in the phpMyRecipes category parameter, which allows remote attackers to exploit the vulnerability by submitting a specially crafted SQL query to manipulate or obtain database data, d...

CVE-2014-9440

SQL injection vulnerability in browse.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL commands via the category parameter...

Sql injection

SQL injection vulnerability in browse.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2014-9440

The CVE-2014-9440 issue affects phpMyRecipes 1.2.2, where a SQL injection vulnerability exists in browse.php via the category parameter. The root cause is inadequate input validation/filtering of the category parameter, allowing remote attackers to append arbitrary SQL commands. Consequences desc...

CVE-2014-9440

SQL injection vulnerability in browse.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2014-9440: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in browse.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2013-4754: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Owl Intranet Knowledgebase 1.10 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Search field to browse.php or 2 the Title field to prefs.php...

PHPMyRecipes 1.2.2 - browse.php?category SQL Injection

PHPMyRecipes 1.2.2 - browse.php?category SQL Injection Exploit Title : phpMyRecipes 1.2.2 SQL injectionpage browse.php, parameter category Author : Manish Kishan Tanwar Download Link : http://prdownloads.sourceforge.net/php-myrecipes/phpMyRecipes-1.2.2.tar.gz?download Date : 23/12/2014 Discovered...

CVE-2014-1222: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in kcfinder/browse.php in Vtiger CRM before 6.0.0 Security patch 1 allows remote authenticated users to read arbitrary files via a .. dot dot in the file parameter in a download action. NOTE: it is likely that this issue is actually in the KCFinder third-party...

phpArcadeScript 2.0 browse.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/16957/info phpArcadeScript is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary...

TriO <= 2.1 (browse.php id) Remote SQL Injection Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl TriO = 2.1 Remote SQL Injection Vulnerability Script: TriO, iO's new web-based module, enables you to...

Mobius <= 1.4.4.1 (browse.php id) Remote SQL Injection Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl Mobius = 1.4.4.1 Remote SQL Injection Vulnerability Script: Mobius Web Publishing Software Script sit...