319 matches found
CVE-2019-6248
PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as demonstrated by restaurants-details.php...
CVE-2019-6248
PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as demonstrated by restaurants-details.php...
CVE-2019-6248: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as demonstrated by restaurants-details.php...
orbitkeyvans.com XSS vulnerability
Open Bug Bounty ID: OBB-647499 Description| Value ---|--- Affected Website:| orbitkeyvans.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2017-17587
FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...
Sql injection
FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...
CVE-2017-17587
FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...
CVE-2017-17587: Improper Neutralization of Special Elements used in an SQL Command
FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...
CVE-2017-17111
CVE-2017-17111 affects Posty Readymade Classifieds Script 1.0. Affected component: listings.php (catid parameter) and ads-details.php (ID parameter). Root cause: SQL injection due to insufficient input validation/sanitization in those endpoints, enabling an attacker to inject SQL commands via the...
CVE-2017-17111: Improper Neutralization of Special Elements used in an SQL Command
Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-details.php?ID= request...
Readymade Classifieds Script 1.0 - SQL Injection
Readymade Classifieds Script 1.0 - SQL Injection Exploit Title: Readymade Classifieds Script 1.0 - SQL Injection Dork: N/A Date: 02.12.2017 Vendor Homepage: http://www.scubez.net/ Software Link: http://www.posty.in/index.html Demo: http://www.posty.in/readymade-classifieds-demo.html Version: 1.0...
architectureforsale.com XSS vulnerability
Vulnerable URL: http://architectureforsale.com/property-details.php?propertyID=1"...
Cross site scripting
WebsiteBaker v2.10.0 has a stored XSS vulnerability in /account/details.php...
CVE-2017-9360
WebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php...
CVE-2017-9360
WebsiteBaker v2.10.0 is affected by a SQL injection in /account/details.php. The CNVD entry confirms a remote attacker can exploit this to execute arbitrary SQL commands, implying severe impact on confidentiality, integrity, and possibly availability. The CVE entry itself notes a SQL injection vu...
CVE-2017-9360: Improper Neutralization of Special Elements used in an SQL Command
WebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php...
CVE-2017-9361: Improper Neutralization of Input During Web Page Generation
WebsiteBaker v2.10.0 has a stored XSS vulnerability in /account/details.php...
tokinosumika.com XSS vulnerability
Vulnerable URL: http://www.tokinosumika.com/hamamatsufp/eventinfo/details.php?id="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 287194 VIP website status:| No Check...
fabulosgloria.com XSS vulnerability
Vulnerable URL: http://www.fabulosgloria.com/details.php?id=502"';-- Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3170103 VIP website status:| No Check...