CVE-2025-41009: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the DRED virtual campus platform. This vulnerability allows an attacker to retrieve, create, update, and delete data from the database by sending a POST request using the ‘buscame’ parameter in ‘/catalogoc/catalogo.php’...

Design of Educational Resources – SQL Injection Vulnerability in Virtual Campus Platform

Diseño de Recursos Educativos Virtual Campus Platform is a virtual classroom platform from Diseño de Recursos Educativos, Spain. Diseño de Recursos Educativos Virtual Campus Platform suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter buscame in the...

marketingtools.com.mx XSS vulnerability

Open Bug Bounty ID: OBB-550040 Description| Value ---|--- Affected Website:| marketingtools.com.mx Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

trical.net XSS vulnerability

Open Bug Bounty ID: OBB-328710 Description| Value ---|--- Affected Website:| trical.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2012-5899

Name of the Vulnerable Software and Affected Versions MyStore Xpress Tienda Virtual version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "art catalogo.php" file. Recommendations For MyStore Xpress Tienda Virtual...

Euchia CMS (catalogo.php) XSS Vulnerability

Exploit for php platform in category web applications =========================================== Euchia CMS catalogo.php XSS Vulnerability =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ ...