11 matches found
Web Ofisi Firma Rehberi SQL注入漏洞
Web Ofisi Firma Rehberi is a directory system of companies operated by the Turkish company Web Ofisi. Version 1 of Web Ofisi Firma Rehberi has a SQL injection vulnerability, which stems from insufficient validation of GET parameter inputs. This vulnerability may lead to SQL injection attacks...
EUVD-2002-0490
Malware in sbrugna...
CVE-2025-6333
A vulnerability, which was classified as critical, was found in PHPGurukul Directory Management System 2.0. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to sql injection. It is possible to initiate the attack remotely. The...
Directory Management System admin/edit-directory.php File SQL Injection Vulnerability
Directory Management System is a directory management system. Directory Management System suffers from a SQL injection vulnerability that stems from improper handling of the email parameter in the admin/edit-directory.php file, which can be exploited to query strings and ultimately trick the serv...
Phpbuddies arbitrary file upload vulnerability-vulnerability warning-the black bar safety net
Phpbuddies is an open-source article Directory System, Phpbuddies in the presence of arbitrary file upload vulnerability that could result in an attacker access to the web shell. +info: Phpbuddies 0day Arbitrary Upload File Vulnerability Author : Xr0b0t [email protected] Homepage :...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in BosDev BosMarket Business Directory System allow remote authenticated users to inject arbitrary web script or HTML via 1 user info account details or 2 a post...
CVE-2007-5833
CVE-2007-5833 concerns multiple cross-site scripting (XSS) vulnerabilities in BosDev BosMarket Business Directory System. The affected component is the BosMarket system itself, where remote authenticated users can inject arbitrary script or HTML via (1) the user information (account details) or (...
CVE-2002-0494
Cross-site scripting vulnerability in WebSight Directory System 0.1 allows remote attackers to execute arbitrary Javascript and gain access to the WebSight administrator via a new link submission containing the script in a website name...
CVE-2002-0494
The CVE-2002-0494 entry describes a Cross-site scripting vulnerability in WebSight Directory System 0.1 that lets remote attackers execute arbitrary JavaScript and potentially gain access to the WebSight administrator via a link submission containing the script in a website name. Affected compone...
CVE-2002-0494
Cross-site scripting vulnerability in WebSight Directory System 0.1 allows remote attackers to execute arbitrary Javascript and gain access to the WebSight administrator via a new link submission containing the script in a website name...
WebSight Directory System: cross-site-scripting bug
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ppp-design found the following cross-site-scripting bug in WebSight Directory System: Details - ------- Product: WebSight Directory System Affected Version: 0.1 Immune Version: 0.1.1 OS affected: all OS with php and mysql Vendor-URL:...