23 matches found
CVE-2026-19985: Improper Neutralization of Input During Web Page Generation
The Relevanssi – A Better Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.28.1 via the 's', 'posttypes', and 'orderby' request parameters. This is due to insufficient input sanitization and output escaping in the relevanssidebugarray...
EUVD-2022-30158
Malicious code in bioql PyPI...
Atom CMS Cross-Site Scripting Vulnerability (CNVD-2022-84074)
Atom CMS, a content management system, is vulnerable to a cross-site scripting vulnerability in Atom CMS v2.0. The vulnerability is caused by a cross-site scripting vulnerability that contains a reflection in the "A" parameter in /widgets/debug.php. An attacker could exploit this vulnerability to...
CVE-2022-25489
Atom CMS v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the "A" parameter in /widgets/debug.php...
Cross site scripting
Atom CMS v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the "A" parameter in /widgets/debug.php...
CVE-2022-25489
Atom CMS v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the "A" parameter in /widgets/debug.php...
CVE-2022-25489: Improper Neutralization of Input During Web Page Generation
Atom CMS v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the "A" parameter in /widgets/debug.php...
Path traversal
A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upload arbitrary files, leading to arbitrary remote code execution...
CVE-2019-18871
The vulnerability CVE-2019-18871 affects Blaauw Remote Kiln Control (v3.00r4) and is a path-traversal flaw in debug.php accessed via default.php. An authenticated attacker can upload arbitrary files, enabling arbitrary remote code execution. Multiple connected sources (Red Hat, CNVD, NVD, CVE lis...
CVE-2019-18871: Improper Limitation of a Pathname to a Restricted Directory
A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upload arbitrary files, leading to arbitrary remote code execution...
CVE-2018-11031: Server-Side Request Forgery (SSRF)
application/home/controller/debug.php in PHPRAP 1.0.4 through 1.0.8 has SSRF via the /debug URI, as demonstrated by an apiurl=file:////etc/passwd&apimethod=get POST request...
CVE-2018-11031
PHPRAP 1.0.4–1.0.8 is affected by a server-side request forgery (SSRF) in the file application/home/controller/debug.php, exploitable via the /debug URI. The issue is triggered by crafted input such as api[url]=file:////etc/passwd and api[method]=get in a POST request, enabling an attacker to ind...
Webfwlog <= 0.92 (debug.php) Remote File Disclosure Vulnerability
No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + D.Script:ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-stable/All/webfwlog-0.92.tbz + D.Scrpit:http://webfwlog.sourceforge.net/...
o2micro debug.php 后门漏洞
网御神州、天融信、美国凹凸等vpn设备开发疑似源于同一套技术，其中有技术维护使用的后门文件debug.php没有删除，该后门文件可以执行任意php代码，SQL语句。 网御神州、天融信、美国凹凸等vpn设备...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Camera Life 2.6.2b8 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.php and 2 rss.php; the query string after the image name in 3 photos/photo; the path parameter to 4 folder.php; page parameter and...
CVE-2008-6295: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Camera Life 2.6.2b8 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.php and 2 rss.php; the query string after the image name in 3 photos/photo; the path parameter to 4 folder.php; page parameter and...
RunCMS 1.5.2 - debug_show.php SQL Injection
RunCMS 1.5.2 - debugshow.php SQL Injection no authentication is performed to run showfiles and showqueries functions, look at this now in /class/debug/debug.php: ... function showqueries$executedqueries, $sorted=0 global $db; $executedqueries = unserializeurldecode$executedqueries; if $sorted == ...
Webfwlog <= 0.92 (debug.php) Remote File Disclosure Vulnerability
No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + D.Script:ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-stable/All/webfwlog-0.92.tbz + D.Scrpit:http://webfwlog.sourceforge.net/...
CVE-2007-0585: Undefined Security Weakness
include/debug.php in Webfwlog 0.92 and earlier, when registerglobals is enabled, allows remote attackers to obtain source code of files via the conffile parameter. NOTE: some of these details are obtained from third party information. It is likely that this issue can be exploited to conduct...
Webfwlog 0.92 - debug.php Remote File Disclosure
Webfwlog 0.92 - debug.php Remote File Disclosure ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + D.Script:ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-stable/All/webfwlog-0.92.tbz + D.Scrpit:http://webfwlog.sourceforge.net/...