76 matches found
EUVD-2019-7284
Malware in sbrugna...
EUVD-2007-6097
Malware in sbrugna...
EUVD-2019-17813
Malware in sbrugna...
PT-2024-25235
Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description A SQL injection issue in the /model/get events.php file allows an attacker to execute arbitrary SQL commands via the event id parameter. This enables the attacker to...
CMS NaiveScripters 3.0.1 Cross Site Scripting
==================================================================================================================================== | Title : CMS NaiveScripters v3.0.1 XSS Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 62.0.3 32-bit | |...
CVE-2018-25076
A vulnerability classified as critical was found in Events Extension on BigTree. Affected by this vulnerability is the function getRandomFeaturedEventByDate/getUpcomingFeaturedEventsInCategoriesWithSubcategories/recacheEvent/searchResults of the file classes/events.php. The manipulation leads to...
CVE-2018-25076: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in Events Extension on BigTree. Affected by this vulnerability is the function getRandomFeaturedEventByDate/getUpcomingFeaturedEventsInCategoriesWithSubcategories/recacheEvent/searchResults of the file classes/events.php. The manipulation leads to...
PT-2022-21275
Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /school/model/get events.php endpoint, specifically through the event id parameter. Recommendations Fo...
ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2022-57822)
ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras, etc. A cross-site scripting vulnerability exists in ZoneMinder 1.32.3 and earlier versions, which stems from the events.php file displaying the 'limit' parameter value without arbitrar...
SQL Injection
ZoneMinder has SQL Injection via the skins/classic/views/events.php filterQueryterms0cnj parameter...
PT-2019-19776
Name of the Vulnerable Software and Affected Versions MyBB Upcoming Events plugin versions prior to 1.33 Description A cross-site scripting XSS issue was found in the upcoming events.php file of the Upcoming Events plugin for MyBB. This issue can be triggered by a crafted name for an event...
Sql injection
ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filterQueryterms0cnj parameter...
ALPINE-CVE-2019-8423
ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filterQueryterms0cnj parameter...
CVE-2019-8423
ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filterQueryterms0cnj parameter...
CVE-2019-8423
ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filterQueryterms0cnj parameter...
CVE-2019-8423
ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filterQueryterms0cnj parameter...
CVE-2019-8423: Improper Neutralization of Special Elements used in an SQL Command
ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filterQueryterms0cnj parameter...
PT-2019-19025
Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.4 Description The issue allows for SQL Injection via the skins/classic/views/events.php endpoint, specifically through the filterQueryterms0cnj parameter. Recommendations For ZoneMinder versions prior to 1.32....
