CVE-2026-43878: Improper Neutralization of Input During Web Page Generation

WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/Meet/iframe.php echoes the attacker-controlled user and pass query parameters unescaped into a JavaScript double-quoted string literal inside a...

EUVD-2008-0863

Malware in sbrugna...

EUVD-2006-1203

Malware in sbrugna...

CVE-2022-1985: Improper Neutralization of Input During Web Page Generation

The Download Manager Plugin for WordPress is vulnerable to reflected Cross-Site Scripting in versions up to, and including 3.2.42. This is due to insufficient input sanitization and output escaping on the 'frameid' parameter found in the /src/Package/views/shortcode-iframe.php file...

CVE-2022-0381: Improper Neutralization of Input During Web Page Generation

The Embed Swagger WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient escaping/sanitization and validation via the url parameter found in the /swagger-iframe.php file which allows attackers to inject arbitrary web scripts onto the page, in versions up to and...

eichgossau.ch XSS vulnerability

Vulnerable URL: http://eichgossau.ch/static/iframe.php?id=31327=3132%27%22%3E%3Cimg%20src=x%20onerror=alert/OPENBUGBOUNTY/%3E7=0%20WHG.%20=10=.h10%20.%20.w=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.01.2018 Vulnerability type:| XSS Vulnerability status:| Public...

adwords.smedia.ca XSS vulnerability

Vulnerable URL: http://adwords.smedia.ca/adwords-tracker-iframe.php?stocknumber===name=yorkdaleford=http://yorkdaleford.com/ford-fleet-toronto-commercial-vehicles" / Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:...

meteocam.gr XSS vulnerability

Vulnerable URL: http://www.meteocam.gr/iframe.php?id=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

CVE-2015-4660

The CVE-2015-4660 entry concerns Enhanced SQL Portal 5.0.7961, a web-based MySQL administration tool. The vulnerability is an XSS in iframe.php, exploitable via the id parameter, allowing remote attackers to inject arbitrary script/HTML. The issue is documented across multiple sources, including ...

CVE-2015-4660: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Enhanced SQL Portal 5.0.7961 allows remote attackers to inject arbitrary web script or HTML via the id parameter to iframe.php...

Custom Tables 3.4.4 - iframe.php key Parameter XSS

The custom-tables WordPress plugin was affected by an iframe.php key Parameter XSS security vulnerability...

eVision CMS 2.0 SQL Injection

--+++============================================================+++-- --+++====== eVision CMS 78 79 80 81 82 '.settext$row$GET'field'.' 83 84 '; + It prints admin's password hashed: + /iframe.php?field=pass&module=users&id=1...

evision-sql.txt

--------------------------------------------------------------------------------------------------------------------------- | | / | | | | | | | / / / || \ '| / | ' / - | / \ V V / - ' \ / - || | \/,|/| /| |||||///|./ |,|...

CVE-2008-0856: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in e-Vision CMS 2.02 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 iframe.php and 2 print.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-1626: Undefined Security Weakness

PHP remote file inclusion vulnerability in iframe.php in the iFrame Module for PHP-NUKE allows remote attackers to execute arbitrary PHP code via a URL in the file parameter...

iFrame for Phpnuke (iframe.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== iFrame for Phpnuke iframe.php Remote File Inclusion Vulnerability =================================================================== iFRAME for PhpNuke iframe.php Remote...

PHP-Nuke - 'iframe.php' Remote File Inclusion

iFRAME for PhpNuke iframe.php Remote File Include Vulnerabilities script :http://www.desarrollonuke.org http://up.9q9q.net/up/index.php?f=uTRRQnIjG file : iframe.php Dork : "/nuke/iframe.php" Found by & Contact : Cold z3ro , [email protected] , http://hack-teach.com/ ifsubstr$file,-4!=".htm" ...

PHP-Nuke - iframe.php Remote File Inclusion

PHP-Nuke - iframe.php Remote File Inclusion iFRAME for PhpNuke iframe.php Remote File Include Vulnerabilities script :http://www.desarrollonuke.org http://up.9q9q.net/up/index.php?f=uTRRQnIjG file : iframe.php Dork : "/nuke/iframe.php" Found by & Contact : Cold z3ro , [email protected] ,...

XLNC1 Radio Classical Music Nuke Portal Remote File Inc. Vuln.

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $ $ Title : XLNC1 Radio Classical Music Nuke Portal Remote File Inc. Vuln. $ Author : Gokhan $ Site : http://www.xlnc1.org/nuke $ Contact : [email protected] | [email protected] $ $ Vuln Code : iframe.php $ $...

xlnc-rfi.txt

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $ $ Title : XLNC1 Radio Classical Music Nuke Portal Remote File Inc. Vuln. $ Author : Gokhan $ Site : http://www.xlnc1.org/nuke $ Contact : [email protected] | [email protected] $ $ Vuln Code : iframe.php $ $...