CVE-2026-79035

A reflected cross-site scripting XSS vulnerability in the p.rfihub.com component of Zeta Marketing Platform ZMP v1.0 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted URL into the ca parameter...

PT-2026-90495

Name of the Vulnerable Software and Affected Versions Zeta Marketing Platform ZMP version 1.0 Description A reflected cross-site scripting XSS issue exists in the p.rfihub.com component. This occurs when the application fails to properly sanitize the ca parameter, allowing an attacker to execute...

EUVD-2026-76700

A reflected cross-site scripting XSS vulnerability in the p.rfihub.com component of Zeta Marketing Platform ZMP v1.0 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted URL into the ca parameter...

CVE-2026-79035: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in the p.rfihub.com component of Zeta Marketing Platform ZMP v1.0 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted URL into the ca parameter...

CVE-2026-79035

The Zeta Marketing Platform (ZMP) v1.0 is affected by a reflected cross-site scripting (XSS) vulnerability in the p.rfihub.com component. This flaw occurs due to the improper neutralization of input during web page generation, specifically when an attacker injects a crafted URL into the ca parame...

CVE-2026-79035

A reflected cross-site scripting XSS vulnerability in the p.rfihub.com component of Zeta Marketing Platform ZMP v1.0 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted URL into the ca parameter...

CVE-2026-79035

A reflected cross-site scripting XSS vulnerability in the p.rfihub.com component of Zeta Marketing Platform ZMP v1.0 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted URL into the ca parameter...

Thunderwind Movie CMS Aj***.php page ca*** parameter SQL injection vulnerability

Thunderwind CMS is a video-on-demand system developed using Thinkphp framework + Mysql to ensure the stability and efficiency of the program. Thunderwind Movie CMS Aj.php page ca parameters exist SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive database...

DEBIAN-CVE-2017-2299

Versions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 make it very easy to accidentally misconfigure TLS trust. If you specify the sslca parameter but do not specify the sslcertsdir parameter, a default will be provided for the sslcertsdir that will trust certificates from any of the...

CVE-2009-0832: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in items.php in the E-Cart module 1.3 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the CA parameter...