CVE-2019-25751

CVE-2019-25751 affects Joomla’s J-ClassifiedsManager component, version 3.0.5. The vulnerability is an SQL injection in the displayads flow that does not require authentication. An attacker can inject malicious SQL through POST parameters, specifically categorySearch, adType, and citySearch, to e...

CVE-2019-25751: Improper Neutralization of Special Elements used in an SQL Command

Joomla Component J-ClassifiedsManager 3.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through POST parameters. Attackers can submit crafted SQL payloads in the categorySearch, adType, and citySearch...

PT-2026-50987

Name of the Vulnerable Software and Affected Versions J-ClassifiedsManager version 3.0.5 Description An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through POST parameters. By submitting crafted payloads to the 'displayads' component...

EUVD-2019-15815

Malware in sbrugna...

CVE-2019-6248

PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as demonstrated by restaurants-details.php...

citysearch.com Cross Site Scripting vulnerability OBB-2143625

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| citysearch.com ---|--- Open Bug Bounty...

citysearch.com Cross Site Scripting vulnerability OBB-2087366

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| citysearch.com ---|--- Open Bug Bounty...

PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script is a local life service online search website system script by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script version 2.0.1, which can be...

CVE-2019-6248

PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as demonstrated by restaurants-details.php...

CVE-2019-6248

PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as demonstrated by restaurants-details.php...

CVE-2019-6248

PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as demonstrated by restaurants-details.php...

CVE-2019-6248

CVE-2019-6248 affects PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1. The connected sources consistently describe a Reflected XSS vulnerability triggered via the srch parameter, demonstrated by the restaurants-details.php endpoint. The vulnerability arises in user-supplied...

CVE-2019-6248: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as demonstrated by restaurants-details.php...

citysearch.com XSS vulnerability

Vulnerable URL: http://www.citysearch.com/search?what=%5B%27%27%5D=%5B%27%27%5D%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Unfixed XSS vulnerability at national.citysearch.com

Security researcher VEHUL, has submitted on 05/07/2009 a cross-site-scripting XSS vulnerability affecting national.citysearch.com, which at the time of submission ranked 1282 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is...