Cross site scripting

phpjabbers Business Directory Script 3.2 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

PT-2023-27964

Name of the Vulnerable Software and Affected Versions phpjabbers Business Directory Script version 3.2 Description The issue concerns Cross Site Scripting XSS via the keyword parameter. This allows for potential malicious script injection. No information is provided about the estimated number of...

PT-2023-27966 · Phpjabbers · Phpjabbers Business Directory Script

Name of the Vulnerable Software and Affected Versions: phpjabbers Business Directory Script version 3.2 Description: The issue is related to SQL Injection via the column parameter. This allows for potential manipulation of database queries. Recommendations: For phpjabbers Business Directory Scrip...

Business Directory Script 跨站脚本漏洞

Business Directory Script is an easy to use PHP directory script for anyone who wants to create a business directory. A cross-site scripting vulnerability exists in phpjabbers Business Directory Script version 3.2, which stems from vulnerability to cross-site scripting XSS attacks via the keyword...

Business Directory Script 跨站脚本漏洞

Business Directory Script is an easy to use PHP directory script for anyone who wants to create a business directory. A cross-site scripting vulnerability exists in phpjabbers Business Directory Script version 3.2, which stems from vulnerability to cross-site scripting XSS attacks via the keyword...

CVE-2023-41537

CVE-2023-41537 impacts phpjabbers Business Directory Script 3.2, with a Cross-Site Scripting (XSS) vulnerability exploitable through the keyword parameter. According to sources, this affects the software as shipped, and the CVSS 3.1 vector indicates network access with user interaction required; ...

CVE-2023-41539

CVE-2023-41539 affects phpjabbers Business Directory Script 3.2, with SQL Injection via the column parameter. Documented details confirm the vulnerable component and issue type; exploit specifics and a fixed version are not provided in the supplied sources. No explicit exploit vectors or mitigati...

CVE-2023-41539

phpjabbers Business Directory Script 3.2 is vulnerable to SQL Injection via the column parameter...

Business Directory Script SQL注入漏洞

Business Directory Script is an easy to use PHP directory script for anyone who wants to create a business directory. A security vulnerability exists in phpjabbers Business Directory Script version 3.2, which stems from the vulnerability to SQL injection via the column parameter...

PHPJabbers Business Directory Script 3.2 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: PHPJabbers Business Directory Script v3.2 - Multiple Vulnerabilities Date: 09/08/2023 Exploit Author: Kerimcan Ozturk Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/business-directory-script/ Version: 3.2 Tested on: Windows 10 Pro Description...

PHPJabbers Business Directory Script v3.2 - Multiple Vulnerabilities

Exploit Title: PHPJabbers Business Directory Script v3.2 - Multiple Vulnerabilities Exploit Author: Kerimcan Ozturk Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/business-directory-script/ Version: 3.2 Tested on: Windows 10 Pro Description Technical Detail...

PHPJabbers Business Directory Script v3.2 - Multiple Vulnerabilities

Exploit Title: PHPJabbers Business Directory Script v3.2 - Multiple Vulnerabilities Date: 09/08/2023 Exploit Author: Kerimcan Ozturk Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/business-directory-script/ Version: 3.2 Tested on: Windows 10 Pro Description...

Directory Management System SQL注入漏洞

Directory Management System is a directory management system. A SQL injection vulnerability exists in Directory Management System v1.0, which stems from a lack of validation of the fullname parameter in add-directory.php against an externally-entered SQL statement. An attacker can exploit this...

E.I Hi-Tech Professional Local Directory Script SQL Injection Vulnerability

E.I Hi-Tech Professional Local Directory Script is a set of PHP and MySQL based scripts for creating local directories from E.I Hi-Tech Technolgies, USA. A SQL injection vulnerability exists in version 1.0 of E.I Hi-Tech Professional Local Directory Script. A remote attacker can create a local...

Sql injection

SQL Injection exists in Professional Local Directory Script 1.0 via the sellerssubcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter...

CVE-2018-5973

SQL Injection exists in Professional Local Directory Script 1.0 via the sellerssubcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter...

CVE-2018-5973

SQL Injection exists in Professional Local Directory Script 1.0 via the sellerssubcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter...

CVE-2018-5973

CVE-2018-5973 affects the Professional Local Directory Script 1.0 (PHP/MySQL). The vulnerability is a SQL injection in which the attacker can inject SQL commands via the sellers_subcategories.php?IndustryID parameter, or via suppliers.php with IndustryID or CategoryID parameters. Reported PoCs an...

Professional Local Directory Script 1.0 SQL Injection

Exploit Title: Professional Local Directory Script 1.0 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.eihitech.com/ Software Link: http://www.eihitech.com/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5973 Exploit Author: Ihsan Sencan Author...

Professional Local Directory Script 1.0 - SQL Injection

Exploit Title: Professional Local Directory Script 1.0 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.eihitech.com/ Software Link: http://www.eihitech.com/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5973 Exploit Author: Ihsan Sencan Author...