EUVD-2021-12539

Malware in sbrugna...

EUVD-2018-21577

Malware in sbrugna...

CVE-2025-9473

A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown function of the file /feedback.php. The manipulation of the argument msg leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly an...

CVE-2021-25647

Mobile application "Testes de Codigo" v11.3 and prior allows stored XSS by injecting a payload in the "feedback" message field causing it to be stored in the remote database and leading to its execution on client devices when loading the "feedback list", either by accessing the website directly o...

Cross site scripting

Mobile application "Testes de Codigo" v11.3 and prior allows stored XSS by injecting a payload in the "feedback" message field causing it to be stored in the remote database and leading to its execution on client devices when loading the "feedback list", either by accessing the website directly o...

CVE-2021-25647

Mobile application "Testes de Codigo" v11.3 and prior allows stored XSS by injecting a payload in the "feedback" message field causing it to be stored in the remote database and leading to its execution on client devices when loading the "feedback list", either by accessing the website directly o...

MetInfo cross-site scripting vulnerability (CNVD-2018-08418)

MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A cross-site scripting vulnerability exists in the front page of MetInfo version 6.0. A remote attacker can exploit this vulnerability by sending a feedback message to an administrat...

CVE-2018-9985

The front page of MetInfo 6.0 allows XSS by sending a feedback message to an administrator...

Cross site scripting

The front page of MetInfo 6.0 allows XSS by sending a feedback message to an administrator...

CVE-2018-9985

The front page of MetInfo 6.0 allows XSS by sending a feedback message to an administrator...

CVE-2018-9985

The CVE-2018-9985 issue affects MetInfo 6.0 where the front page permits cross-site scripting (XSS) by submitting a feedback message to an administrator. Documented sources (NVD/CNVD) confirm an XSS vulnerability in MetInfo 6.0’s front page, but no specific exploit details, affected file paths, o...

CVE-2018-9985

The front page of MetInfo 6.0 allows XSS by sending a feedback message to an administrator...

CVE-2018-9985: Improper Neutralization of Input During Web Page Generation

The front page of MetInfo 6.0 allows XSS by sending a feedback message to an administrator...

PT-2018-19148

Name of the Vulnerable Software and Affected Versions MetInfo version 6.0 Description The issue allows for XSS by sending a feedback message to an administrator from the front page. Recommendations For MetInfo version 6.0, consider disabling the feedback feature on the front page until a patch is...