58 matches found
CVE-2025-63947: Improper Neutralization of Input During Web Page Generation
A Reflected Cross-Site Scripting XSS vulnerability exists in phpMsAdmin version 2.2 in the databasemode.php file. An attacker can execute arbitrary web script or HTML via the dbname parameter after a user is authenticated...
phpMsAdmin 安全漏洞
phpMsAdmin is a Microsoft SQL Server administration tool by Craig Taub Individual Developer. A security vulnerability exists in phpMsAdmin version 2.2, which stems from an unfiltered dbname parameter in the databasemode.php file, which could lead to an SQL injection attack...
phpMsAdmin 安全漏洞
phpMsAdmin is a Microsoft SQL Server administration tool by Craig Taub Individual Developer. A security vulnerability exists in phpMsAdmin version 2.2, which stems from an unfiltered dbname parameter in the databasemode.php file, which could lead to a reflective cross-site scripting attack...
CVE-2025-63947
A Reflected Cross-Site Scripting XSS vulnerability exists in phpMsAdmin version 2.2 in the databasemode.php file. An attacker can execute arbitrary web script or HTML via the dbname parameter after a user is authenticated...
PT-2025-52344
Name of the Vulnerable Software and Affected Versions phpMsAdmin version 2.2 Description A SQL Injection issue exists in the database mode.php file. An attacker can execute arbitrary SQL commands via the dbname parameter, potentially leading to information disclosure or database manipulation...
CVE-2025-63947
A Reflected Cross-Site Scripting (XSS) vulnerability exists in phpMsAdmin version 2.2 within the database_mode.php file. The root cause is an unfiltered dbname parameter , which allows an attacker to execute arbitrary web scripts or HTML. This attack can be performed after a user has been authent...
CVE-2025-63948: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability exists in phpMsAdmin version 2.2 in the databasemode.php file. An attacker can execute arbitrary SQL commands via the dbname parameter, potentially leading to information disclosure or database manipulation...
EUVD-2000-0286
Malware in sbrugna...
EUVD-2008-0136
Malware in sbrugna...
CVE-2025-46154
Foxcms v1.25 has a SQL time injection in the $POST'dbname' parameter of installdb.php...
FoxCMS 安全漏洞
FoxCMS is a free commercial open source content management system from China Qianxu FoxCMS. A security vulnerability exists in FoxCMS v1.2.5, which is caused by SQL time injection in the $POST dbname parameter in installdb.php...
CVE-2025-46154: Improper Neutralization of Special Elements used in an SQL Command
Foxcms v1.25 has a SQL time injection in the $POST'dbname' parameter of installdb.php...
GHSA-646R-8FCC-P82R Subrion CMS vulnerable to Cross-site Scripting
Multiple Cross-Site Scripting XSS vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, dbname, dbuser, adminusername and adminemail...
CVE-2023-43875: Improper Neutralization of Input During Web Page Generation
Multiple Cross-Site Scripting XSS vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, dbname, dbuser, adminusername and adminemail...
SUSE CVE-2008-0123
Cross-site scripting XSS vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers to inject arbitrary web script or HTML via the dbname parameter. NOTE: this issue only exists until the installation is complete...
CVE-2020-23149: Improper Neutralization of Special Elements used in an SQL Command
The dbName parameter in ajaxDbInstall.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a SQL injection and access sensitive database information...
CVE-2019-17608
HongCMS 3.0.0 has XSS via the install/index.php dbname parameter...
CVE-2019-17608
HongCMS 3.0.0 has XSS via the install/index.php dbname parameter...
CVE-2019-17608
Affected software: HongCMS 3.0.0. Vulnerability: Cross-Site Scripting via the install/index.php dbname parameter. Vector/Root cause: unsanitized/input handling leads to client-side script execution. Impact: attacker can execute client-side code. References: NVD entry describes XSS via the dbname ...