EUVD-2025-26698

Malicious code in bioql PyPI...

PT-2023-22606 · Webkil · Webkul Qloapps

Name of the Vulnerable Software and Affected Versions: Webkil QloApps version 1.5.2 Description: A Cross Site Scripting issue allows a remote attacker to obtain sensitive information via the back and email create parameters in the AuthController.php file. Recommendations: For Webkil QloApps versi...

CVE-2020-9460

Octech Oempro 4.7 through 4.11 allow XSS by an authenticated user. The parameter CampaignName in Campaign.Create is vulnerable...

PT-2015-4208

Name of the Vulnerable Software and Affected Versions Installatron GQ File Manager version 0.2.5 Description The issue allows remote attackers to execute arbitrary SQL commands via the create parameter to "index.php". This can be leveraged for cross-site scripting XSS attacks by creating a file...

CVE-2014-9445: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in incl/create.inc.php in Installatron GQ File Manager 0.2.5 allows remote attackers to execute arbitrary SQL commands via the create parameter to index.php. NOTE: this can be leveraged for cross-site scripting XSS attacks by creating a file that generates an error...