CVE-2025-63451: Improper Neutralization of Special Elements used in an SQL Command

Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/sign-in.php...

cloudlgs.com XSS vulnerability

Open Bug Bounty ID: OBB-353277 Description| Value ---|--- Affected Website:| cloudlgs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2003-1409: Exposure of Sensitive Information to an Unauthorized Actor

TOPo 1.43 allows remote attackers to obtain sensitive information by sending an HTTP request with an invalid parameter to 1 in.php or 2 out.php, which reveals the path to the TOPo directory in the error message...

CVE-2006-2323: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in SmartISoft phpListPro 2.01 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the returnpath parameter in 1 editsite.php, 2 addsite.php, and 3 in.php. NOTE: The config.php vector is already covered by CVE-2006-1749...