PT-2022-27744

Name of the Vulnerable Software and Affected Versions Helmet Store Showroom Site version 1.0 Description The issue is related to SQL Injection. It can be exploited via the "/hss/?page=categories&c=" endpoint. The c variable is vulnerable to SQL injection attacks. Recommendations For Helmet Store...

CVE-2019-16969

In FusionPBX up to 4.5.7, the file app\fifolist\fifointeractive.php uses an unsanitized "c" variable coming from the URL, which is reflected in HTML, leading to XSS...

CVE-2019-16989: Improper Neutralization of Input During Web Page Generation

In FusionPBX up to v4.5.7, the file app\conferencesactive\conferenceinteractive.php uses an unsanitized "c" variable coming from the URL, which is reflected in HTML, leading to XSS...

CVE-2019-16969: Improper Neutralization of Input During Web Page Generation

In FusionPBX up to 4.5.7, the file app\fifolist\fifointeractive.php uses an unsanitized "c" variable coming from the URL, which is reflected in HTML, leading to XSS...

PT-2018-19089

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.2.7 Description A Directory Traversal issue allows an attacker to determine the existence of files and directories outside the web-site installation directory. It also enables checking if a file has contents matching ...

PT-2017-17101

Name of the Vulnerable Software and Affected Versions INTER-Mediator version 5.5 Description The issue is related to Multiple Cross-Site Scripting XSS problems. These problems arise due to inadequate filtering of user-provided data, specifically the c and cred variables, which are passed to the...