The vulnerability of the microprogramming software used in Zyxel Ethernet switches such as ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, and ZyWALL 1100 lies in the lack of protective measures for website structures. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the microprogramming software used in Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, and ZyWALL 1100 lies in the lack of protective measures for the website...

CVE-2019-14754

Open-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students/students/document id parameter...

VulnCheck KEV: CVE-2018-10225

thinkphp 3.1.3 has SQL Injection via the index.php s parameter...

CVE-2019-8363

Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=indexXSS value...

CVE-2019-7721

lib/NCCms.class.php in nc-cms 3.5 allows upload of .php files via the index.php?action=save name and editordata parameters...

CVE-2019-7568

An issue was discovered in baijiacms V4 that can result in time-based blind SQL injection to get data via the cate parameter in an index.php?act=index request...

CVE-2018-19458

In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI URI, a different vulnerability than CVE-2018-19246...

CVE-2018-17832

XSS exists in WUZHI CMS 2.0 via the index.php v or f parameter...

WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2019-09138)

WUZHI CMS is five fingers WUZHI company based on PHP and MySQL open source content management system CMS. WUZHI CMS 4.1.0 there is a cross-site scripting vulnerability , attackers can index.php?m=core&f=set&v=basic formstatcode parameter to exploit the vulnerability for cross-site scripting attac...

CVE-2018-5377

Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the archiver\index.php action parameter...

swaenenryck.nl XSS vulnerability

Vulnerable URL: http://www.swaenenryck.nl/index.php?site=1%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Autofocus%20/;%20Onfocus=confirmOPENBUGBOUNTY%20//%3E%3CSvg%3Eid=4 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:|...

CVE-2017-6561

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=XSS attack...

File Inclusion Vulnerability in ucms

UCMS is an open source content management system, which can be used to develop various kinds of enterprise stations, article stations and station systems. ucms file inclusion vulnerability. Due to ucms/ucms/index.php background home page in the do parameters externally controllable, attackers can...

SQL Injection Vulnerability in zabbix

zabbix is an open source enterprise performance monitoring solution. A SQL injection vulnerability exists in the insert method of the profileIdx2 parameter in zabbix's jsrpc. An attacker can log in to the zabbix management system without authorization, and can also directly obtain operational...

SocialEngine SQL Injection Vulnerability

SocialEngine is a PHP-based social networking platform that allows the creation of social networks on websites. An injection vulnerability exists in SocialEngine SQL. Due to insufficient filtering of input passed to the "/index.php" script via the "orderby" HTTP GET parameter, an unauthenticated...

UBUNTU-CVE-2013-5588

Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.8b and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the step parameter to install/index.php or 2 the id parameter to cacti/host.php...

CVE-2013-5588

Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.8b and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the step parameter to install/index.php or 2 the id parameter to cacti/host.php...

UBUNTU-CVE-2011-5025

Multiple cross-site scripting XSS vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via 1 the tag parameter to editTag.yaws, 2 the index parameter to showOldPage.yaws, 3 the node parameter to allRefsToMe.yaws, or 4 the text paramete...

PT-2010-1663 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 version 4.0 Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the showUid parameter in index.php. However, the TYPO3 Security Team disputes this report, stating that the showUid parameter i...

Delta Duo Script 1.0 Cross Site Scripting

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...