46 matches found
KindEditor 4.1.11 - Cross-Site Scripting Detection
KindEditor 4.1.11 contains a cross-site scripting vulnerability via the php/demo.php content1 parameter. !/usr/bin/env python3 -- coding: utf-8 -- """KindEditor 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...
EUVD-2026-18225
A vulnerability was identified in Xiaopi Panel 1.0.0. This vulnerability affects unknown code of the file /demo.php of the component WAF Firewall. The manipulation of the argument param leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available...
CVE-2026-5332
A vulnerability is identified in Xiaopi Panel 1.0.0 affecting the WAF Firewall component, specifically the /demo.php file. The issue arises from manipulation of the param argument, enabling cross-site scripting. Remote exploitation is possible, and an exploit is publicly available. The vendor was...
PT-2026-29739
A vulnerability was identified in Xiaopi Panel 1.0.0. This vulnerability affects unknown code of the file /demo.php of the component WAF Firewall. The manipulation of the argument param leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available...
CVE-2026-5332: Improper Neutralization of Input During Web Page Generation
A vulnerability was identified in Xiaopi Panel 1.0.0. This vulnerability affects unknown code of the file /demo.php of the component WAF Firewall. The manipulation of the argument param leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available...
CVE-2026-2122: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in Xiaopi Panel up to 20260126. This impacts an unknown function of the file /demo.php of the component WAF Firewall. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public...
EUVD-2019-17083
Malware in sbrugna...
EUVD-2023-50711
Malicious code in bioql PyPI...
CVE-2025-6457
CVE-2025-6457 affects code-projects Online Hotel Reservation System 1.0. The vulnerability lies in /reservation/demo.php where the Start parameter is unsafely handled, allowing remote SQL injection. Exploitation is possible and has been disclosed. Several sources (including PT-Security and CNVD) ...
CVE-2025-6457: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in code-projects Online Hotel Reservation System 1.0. This affects an unknown part of the file /reservation/demo.php. The manipulation of the argument Start leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2023-46505
Cross Site Scripting vulnerability in FanCMS v.1.0.0 allows an attacker to execute arbitrary code via the content1 parameter in the demo.php file...
CVE-2023-46505
Cross Site Scripting vulnerability in FanCMS v.1.0.0 allows an attacker to execute arbitrary code via the content1 parameter in the demo.php file...
Cross site scripting
Cross Site Scripting vulnerability in FanCMS v.1.0.0 allows an attacker to execute arbitrary code via the content1 parameter in the demo.php file...
CVE-2023-46505
Cross Site Scripting vulnerability in FanCMS v.1.0.0 allows an attacker to execute arbitrary code via the content1 parameter in the demo.php file...
CVE-2023-46505: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in FanCMS v.1.0.0 allows an attacker to execute arbitrary code via the content1 parameter in the demo.php file...
CVE-2023-46505
Cross Site Scripting vulnerability in FanCMS v.1.0.0 allows an attacker to execute arbitrary code via the content1 parameter in the demo.php file...
CVE-2023-46505
FanCMS v1.0.0 is affected by a Cross Site Scripting (XSS) vulnerability that allows an attacker to execute arbitrary code via the content1 parameter in demo.php. Root cause is input handling in the content1 parameter leading to script execution. Impact is the ability to run code in the context of...
CVE-2021-40925
Cross-site scripting XSS vulnerability in dompdf/dompdf/www/demo.php infaveo-helpdesk v1.11.0 and below allow remote attackers to inject arbitrary web script or HTML via the $SERVER"PHPSELF" parameter...
CVE-2021-40925: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in dompdf/dompdf/www/demo.php infaveo-helpdesk v1.11.0 and below allow remote attackers to inject arbitrary web script or HTML via the $SERVER"PHPSELF" parameter...
PT-2021-23013
Name of the Vulnerable Software and Affected Versions infaveo-helpdesk versions 1.11.0 and below Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the $ SERVER"PHP SELF" parameter in the dompdf/dompdf/www/demo.php file. This enables...