320 matches found
Mara CMS 7.5 - Cross-Site Scripting
Mara CMS 7.5 allows reflected cross-site scripting in contact.php via the theme or pagetheme parameters. id: CVE-2020-24223 info: name: Mara CMS 7.5 - Cross-Site Scripting author: pikpikcu severity: medium description: Mara CMS 7.5 allows reflected cross-site scripting in contact.php via the them...
CVE-2026-45734
MyBB is free and open source forum software. Prior to 1.8.40, the built-in CAPTCHA does not consistently enforce single-use semantics, allowing remote attackers to bypass CAPTCHA controls through challenge replay. The successful validation paths in contact.php, member.php?action=doresendactivatio...
EUVD-2026-61021
MyBB is free and open source forum software. Prior to 1.8.40, the Contact module does not validate a redirect URL or protocol correctly, resulting in an open redirect and reflected JavaScript code injection. contact.php accepts the redirect target from the from HTTP parameter in $mybb-input'from'...
EUVD-2026-61014
MyBB is free and open source forum software. Prior to 1.8.40, the built-in CAPTCHA does not consistently enforce single-use semantics, allowing remote attackers to bypass CAPTCHA controls through challenge replay. The successful validation paths in contact.php, member.php?action=doresendactivatio...
CVE-2026-45734
MyBB is free and open source forum software. Prior to 1.8.40, the built-in CAPTCHA does not consistently enforce single-use semantics, allowing remote attackers to bypass CAPTCHA controls through challenge replay. The successful validation paths in contact.php, member.php?action=doresendactivatio...
CVE-2026-45734 MyBB: Default CAPTCHA missing invalidation
MyBB is free and open source forum software. Prior to 1.8.40, the built-in CAPTCHA does not consistently enforce single-use semantics, allowing remote attackers to bypass CAPTCHA controls through challenge replay. The successful validation paths in contact.php, member.php?action=doresendactivatio...
CVE-2026-45734 MyBB: Default CAPTCHA missing invalidation
MyBB is free and open source forum software. Prior to 1.8.40, the built-in CAPTCHA does not consistently enforce single-use semantics, allowing remote attackers to bypass CAPTCHA controls through challenge replay. The successful validation paths in contact.php, member.php?action=doresendactivatio...
CVE-2026-45734
MyBB versions before 1.8.40 fail to call captcha::invalidate_captcha() in five endpoints (contact.php, member.php actions, sendthread.php), allowing a valid CAPTCHA response to be replayed for low-integrity abuse (spam, password reset floods). CVSS 5.3 MEDIUM. Fixed in 1.8.40; no in-the-wild expl...
PT-2026-77172
MyBB is free and open source forum software. Prior to 1.8.40, the Contact module does not validate a redirect URL or protocol correctly, resulting in an open redirect and reflected JavaScript code injection. contact.php accepts the redirect target from the from HTTP parameter in $mybb-input'from'...
Code-Projects Online Food Ordering System 代码注入漏洞
The Code-Projects Online Food Ordering System is an open-source online ordering system developed by Code-Projects. Version 1.0 of the Code-Projects Online Food Ordering System contains a code injection vulnerability. This vulnerability stems from incorrect handling of the parameter “Name” in the...
PT-2026-28662
Name of the Vulnerable Software and Affected Versions code-projects Online Food Ordering System version 1.0 Description A flaw exists in code-projects Online Food Ordering System 1.0, specifically within an unknown functionality of the /dbfood/contact.php file. Manipulating the Name parameter can...
EUVD-2021-25194
Malware in sbrugna...
EUVD-2010-4332
Malware in sbrugna...
EUVD-2006-5656
Malware in sbrugna...
EUVD-2007-4594
Malware in sbrugna...
EUVD-2017-11307
Malware in sbrugna...
EUVD-2006-1137
Malware in sbrugna...
EUVD-2010-1123
Malware in sbrugna...