EUVD-2019-17813

Malware in sbrugna...

EUVD-2007-6097

Malware in sbrugna...

EUVD-2019-7284

Malware in sbrugna...

PT-2024-25235

Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description A SQL injection issue in the /model/get events.php file allows an attacker to execute arbitrary SQL commands via the event id parameter. This enables the attacker to...

CMS NaiveScripters 3.0.1 Cross Site Scripting

==================================================================================================================================== | Title : CMS NaiveScripters v3.0.1 XSS Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 62.0.3 32-bit | |...

CVE-2018-25076

A vulnerability classified as critical was found in Events Extension on BigTree. Affected by this vulnerability is the function getRandomFeaturedEventByDate/getUpcomingFeaturedEventsInCategoriesWithSubcategories/recacheEvent/searchResults of the file classes/events.php. The manipulation leads to...

CVE-2018-25076: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Events Extension on BigTree. Affected by this vulnerability is the function getRandomFeaturedEventByDate/getUpcomingFeaturedEventsInCategoriesWithSubcategories/recacheEvent/searchResults of the file classes/events.php. The manipulation leads to...

PT-2022-21275

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /school/model/get events.php endpoint, specifically through the event id parameter. Recommendations Fo...

ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2022-57822)

ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras, etc. A cross-site scripting vulnerability exists in ZoneMinder 1.32.3 and earlier versions, which stems from the events.php file displaying the 'limit' parameter value without arbitrar...

SQL Injection

ZoneMinder has SQL Injection via the skins/classic/views/events.php filterQueryterms0cnj parameter...

PT-2019-19776

Name of the Vulnerable Software and Affected Versions MyBB Upcoming Events plugin versions prior to 1.33 Description A cross-site scripting XSS issue was found in the upcoming events.php file of the Upcoming Events plugin for MyBB. This issue can be triggered by a crafted name for an event...

Sql injection

ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filterQueryterms0cnj parameter...

CVE-2019-8423

ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filterQueryterms0cnj parameter...

CVE-2019-8423

ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filterQueryterms0cnj parameter...

PT-2019-19025

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.4 Description The issue allows for SQL Injection via the skins/classic/views/events.php endpoint, specifically through the filterQueryterms0cnj parameter. Recommendations For ZoneMinder versions prior to 1.32....

CVE-2019-8423

ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filterQueryterms0cnj parameter...

CVE-2019-8423

ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filterQueryterms0cnj parameter...

CVE-2019-8423

ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filterQueryterms0cnj parameter...

CVE-2019-8423: Improper Neutralization of Special Elements used in an SQL Command

ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filterQueryterms0cnj parameter...

UBUNTU-CVE-2019-7337

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3 as the view 'events' events.php insecurely displays the limit parameter value, without applying any proper output filtration. This issue exists because of the function sortHeader in functions.php, which insecurely returns the...