CVE-2026-5805: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Easy Blog Site up to 1.0. The impacted element is an unknown function of the file /users/contactus.php. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The exploit has been made available...

CVE-2025-15073

A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /contactus.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and...

CVE-2025-15073

CVE-2025-15073 affects itsourcecode Online Frozen Foods Ordering System 1.0. A SQL injection vulnerability exists in the contact_us.php handling of the Name parameter, with remote exploitation reported and public disclosure of the exploit. Several connected sources consistently cite the issue in ...

CVE-2025-15073: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /contactus.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and...

EUVD-2006-6834

Malware in sbrugna...

EUVD-2005-0459

Malware in sbrugna...

CVE-2024-9300: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Online Railway Reservation System 1.0. This vulnerability affects unknown code of the file contactus.php of the component Message Us Form. The manipulation of the argument fullname/email/message leads to cross site scripting. T...

movedancewear.com XSS vulnerability

Open Bug Bounty ID: OBB-671915 Description| Value ---|--- Affected Website:| movedancewear.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

majanopools.com XSS vulnerability

Open Bug Bounty ID: OBB-636901 Description| Value ---|--- Affected Website:| majanopools.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-12055: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contactus.php, faq.php, about.php, photogallery.php, privacy.php, and so on...

cubancigarclub.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-462415 Description| Value ---|--- Affected Website:| cubancigarclub.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

shelterlistings.org XSS vulnerability

Vulnerable URL: http://www.shelterlistings.org/contactus.php?shelter=1"...

OSCommerce 2.2 Contact_us.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12568/info A vulnerability is reported to exist in osCommerce that may allow a remote user to launch cross-site scripting attacks. This issue could permit a remote attacker to create a malicious URI link that includes...

PG eLMS Pro vDEC_2007_01 (contact_us.php) Multiple POST XSS Vulnerabilities

No description provided by source. !-- PG eLMS Pro vDEC200701 contactus.php Multiple POST XSS Vulnerabilities Vendor: PilotGroup Ltd Product web page: http://www.elmspro.com Affected version: DEC200701 Summary: eLMS Pro solution is an outstanding and yet simple Learning Management system. Our...

PG eLMS Pro vDEC_2007_01 (contact_us.php) Multiple POST XSS

Exploit for php platform in category web applications PG eLMS Pro vDEC200701 contactus.php Multiple POST XSS Vulnerabilities body bgcolo...

PG eLms Pro vDEC_2007_01 - contact_us.php Multiple POST Cross-Site Scripting Vulnerabilities

PG eLms Pro vDEC200701 - contactus.php Multiple POST Cross-Site Scripting Vulnerabilities PG eLMS Pro vDEC200701 contactus.php Multiple POST XSS Vulnerabilities scrip...

CVE-2006-6851

The CVE-2006-6851 entry documents multiple XSS vulnerabilities in ac4p Mobilelib gold 2, specifically in contact_us.php, exploitable via the (1) email and (2) errr parameters. Affected software is the Mobilelib gold 2 package; the underlying issue is improper input handling in contact_us.php that...

CVE-2006-6851

Multiple cross-site scripting XSS vulnerabilities in contactus.php in ac4p Mobilelib gold 2 allow remote attackers to inject arbitrary web script or HTML via the 1 email or 2 errr parameter...

CVE-2006-6851: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in contactus.php in ac4p Mobilelib gold 2 allow remote attackers to inject arbitrary web script or HTML via the 1 email or 2 errr parameter...

CVE-2006-6851

Multiple cross-site scripting XSS vulnerabilities in contactus.php in ac4p Mobilelib gold 2 allow remote attackers to inject arbitrary web script or HTML via the 1 email or 2 errr parameter...