CVE-2026-104110

FileRise Pro ポータルエンドポイント（get.php）における未認証の情報漏洩 概要 public/api/pro/portals/get.php は、FileRise Pro クライアントポータルの完全な内部レコード — 内部ストレージフォルダパス、クライアントの連絡先メールアドレス、および完全なアップロードポリシーを含む — を、ポータルのスラッグを知っているか推測できる未認証 の呼び出し元に返します。...

EUVD-2005-3308

Malware in sbrugna...

CVE-2024-29320: Improper Neutralization of Special Elements used in an SQL Command

Wallos before 1.15.3 is vulnerable to SQL Injection via the category and payment parameters to /subscriptions/get.php...

CVE-2024-29320

Wallos versions prior to 1.15.3 are vulnerable to an SQL Injection vulnerability. The flaw originates from the improper neutralization of special elements in the category and payment parameters within the /subscriptions/get.php API endpoint. This could allow an attacker to execute unauthorized SQ...

CVE-2024-0734

A vulnerability was found in Smsot up to 2.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /get.php. The manipulation of the argument tid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...

Sql injection

A vulnerability was found in Smsot up to 2.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /get.php. The manipulation of the argument tid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...

CVE-2024-0734 Smsot get.php sql injection

A vulnerability was found in Smsot up to 2.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /get.php. The manipulation of the argument tid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...

PT-2024-15791 · Smsot · Smsot

Name of the Vulnerable Software and Affected Versions: Smsot versions up to 2.12 Description: A critical issue has been found in Smsot, affecting an unknown functionality of the file /get.php. The manipulation of the tid argument leads to sql injection. This issue can be exploited remotely...

CVE-2024-0734: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Smsot up to 2.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /get.php. The manipulation of the argument tid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...

Smsot SQL Injection Vulnerability

Smsot is a professional community operation solution from China Motech Smsot company. A SQL injection vulnerability exists in Smsot 2.12 and earlier versions, which stems from the parameter tid in the file /get.php that causes SQL injection...

CVE-2020-28977: Server-Side Request Forgery (SSRF)

The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/get.php?subdomain=SSRF...

PT-2019-4309

Name of the Vulnerable Software and Affected Versions D-Link DIR-412 version A1-1.14WW Description The issue concerns a lack of authentication requirements for certain web interfaces on the affected router. This allows an attacker to access the router's log file through the "log get.php" API...

pmcomp.ru XSS vulnerability

Vulnerable URL: http://pmcomp.ru/my/s3/captcha/get.php?callback=prompt/OPENBUGBOUNTY/...

tricoloresports.com XSS vulnerability

Vulnerable URL: https://tricoloresports.com/get.php?callback=prompt/OPENBUGBOUNTY/...

Rockstar Games: CSRF in 'set.php' via age causes stored XSS on 'get.php' - http://www.rockstargames.com/php/videoplayer_cache/get.php'

Hello, Background: Sending a POST request to set.php with age='PAYLOAD' will cause a stored XSS on the GET.php file most likely caused by the cookie, since that's what the age is based on. For this vulnerability and in order to demonstrate BOTH CSRF and XSS I have written a simple script tested o...

esgexperience.com XSS vulnerability

Vulnerable URL: https://esgexperience.com/share/get.php?url='"'"SCRIPT"' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8196379 Google Pagerank| 0 VIP website status:| No Check...

Cross site scripting

Cross-site scripting XSS vulnerability in get.php in the WP Microblogs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the oauthverifier parameter...

CVE-2014-4590: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in get.php in the WP Microblogs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the oauthverifier parameter...

WordPress Microblog Plugin <= 0.4.0 - XSS

Because of this vulnerability in get.php, the attackers can inject arbitrary web script or HTML via the "oauthverifier" parameter. Solution Update the plugin...

PicsEngine 2 Beta Cross Site Scripting / SQL Injection

PicsEngine Application error message Vulnerability ================================================== Author indoushka ================================================== vendor : Powered by PicsEngine 2 Beta ================================================== Blind SQL Injection :...