Lucene search
+L

5 matches found

EUVD
EUVD
added 8 hours ago6 views

EUVD-2026-54923

A vulnerability was determined in MingSoft MCMS up to 3.0.6. This affects the function ModelDataImpl.queryDiyFormData of the file /mdiy/form/data/list.do of the component ms-mdiy. Executing a manipulation of the argument formFields can lead to sql injection. The attack may be performed from remot...

7.5CVSS7AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2024/05/23 7:50 p.m.22 views

silverstripe/framework ReadOnly transformation for formfields exploitable

Form fields returning isReadonly as true are vulnerable to reflected XSS injections. This includes ReadonlyField, LookupField, HTMLReadonlyField, as well as special purpose fields like TimeFieldReadonly. Values submitted to through these form fields are not filtered out from the form session data...

6.1AI score
SaveExploits0References4Affected Software1
Friends Of PHP
Friends Of PHP
added 2016/11/18 12:17 p.m.11 views

SS-2016-010: ReadOnly transformation for formfields exploitable

More info at https://www.silverstripe.org/download/security-releases/ss-2016-010/...

7.2AI score
SaveExploits0Affected Software1
exploitpack
exploitpack
added 2008/10/08 12:0 a.m.31 views

AdMan 1.1.20070907 - campaignId SQL Injection

AdMan 1.1.20070907 - campaignId SQL Injection Remote SQL Injection SuB-ZeRo SuB-ZeRo my best freinds :: x.CJP.X & ach2008 & carlos the jackel & HiSoK4 all muslims milw0rm.com 2008-10-08...

0.6AI score
SaveExploits0
zdt
zdt
added 2008/10/08 12:0 a.m.34 views

AdMan 1.1.20070907 (campaignId) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== AdMan 1.1.20070907 campaignId SQL Injection Vulnerability =========================================================== Remote SQL Injection SuB-ZeRo author : SuB-ZeRoalgeria hacker...

7.1AI score
SaveExploits0
Rows per page
Query Builder