EUVD-2021-14931

Malware in sbrugna...

CVE-2021-28242

SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by injecting SQL commands into the "cfname" parameter when creating a new filter under the "Collections" tab...

CVE-2021-28242

SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by injecting SQL commands into the "cfname" parameter when creating a new filter under the "Collections" tab...

Sql injection

SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by injecting SQL commands into the "cfname" parameter when creating a new filter under the "Collections" tab...

CVE-2021-28242

SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by injecting SQL commands into the "cfname" parameter when creating a new filter under the "Collections" tab...

CVE-2021-28242

This CVE affects b2evolution v7.2.2-stable, specifically the evoadm.php component. The vulnerability is SQL Injection in the cf_name parameter when creating a new filter under the Collections tab, enabling remote attackers to obtain sensitive database information. Exploitation materials exist in ...

CVE-2021-28242: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by injecting SQL commands into the "cfname" parameter when creating a new filter under the "Collections" tab...

PT-2021-17829

Name of the Vulnerable Software and Affected Versions: b2evolution version 7.2.2-stable Description: The issue allows remote attackers to obtain sensitive database information by injecting SQL commands into the cf name parameter when creating a new filter under the "Collections" tab. This occurs ...

b2evolution CMS 6.11.6 Cross Site Scripting

Exploit Title: Reflected XSS in b2evolution CMS 6.11.6 via tab3 parameter in evoadm.php CVE : CVE-2020-22839 Date: 10/02/2021 Exploit Author: Nakul Ratti, Soham Bakore Vendor Homepage: https://b2evolution.net/ Software Link: https://b2evolution.net/downloads/6-11-6-stable?download=12405 Version:...

CVE-2020-22839

Reflected cross-site scripting vulnerability XSS in the evoadm.php file in b2evolution cms version 6.11.6-stable allows remote attackers to inject arbitrary webscript or HTML code via the tab3 parameter...

CVE-2020-22839

CVE-2020-22839 affects b2evolution CMS 6.11.6-stable, specifically the evoadm.php file. The vulnerability is a reflected XSS via the tab3 parameter, enabling injection of arbitrary web script/HTML. Public PoCs exist (Exploit-DB and PacketStorm) demonstrating the tab3 XSS. Exploitation status in p...

CVE-2020-22839

Reflected cross-site scripting vulnerability XSS in the evoadm.php file in b2evolution cms version 6.11.6-stable allows remote attackers to inject arbitrary webscript or HTML code via the tab3 parameter...

CVE-2020-22839

Reflected cross-site scripting vulnerability XSS in the evoadm.php file in b2evolution cms version 6.11.6-stable allows remote attackers to inject arbitrary webscript or HTML code via the tab3 parameter...

CVE-2020-22839: Improper Neutralization of Input During Web Page Generation

Reflected cross-site scripting vulnerability XSS in the evoadm.php file in b2evolution cms version 6.11.6-stable allows remote attackers to inject arbitrary webscript or HTML code via the tab3 parameter...

PT-2021-10798

Name of the Vulnerable Software and Affected Versions b2evolution cms version 6.11.6-stable Description A reflected cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML code. This is achieved via the tab3 parameter in the evoadm.php file...