PT-2023-10114 · Unknown · Soshtolsus Wing-Tight

Name of the Vulnerable Software and Affected Versions: soshtolsus wing-tight versions prior to 1.0.0 Description: A critical vulnerability was found in soshtolsus wing-tight, affecting an unknown part of the file index.php. The manipulation of the p argument leads to file inclusion, and it is...

Online Student Rate System 跨站脚本漏洞

Online Student Rate System is an online grading system for students. v1.0 of the Online Student Rate System is vulnerable to a cross-site scripting vulnerability that stems from a lack of validation filtering of user-supplied data and output data in the page parameter of the index.php file. An...

Sql injection

dynamicMarkt = 3.10 is affected by SQL injection in the kat parameter of index.php...

CVE-2019-9915

GetSimpleCMS 3.3.13 has an Open Redirect via the admin/index.php redirect parameter...

Cross site scripting

XSS exists in WUZHI CMS 2.0 via the index.php v or f parameter...

CVE-2018-17832

XSS exists in WUZHI CMS 2.0 via the index.php v or f parameter...

CVE-2018-15130

ThinkSAAS through 2018-07-25 has XSS via the index.php?app=group&ac=create&ts=do groupdesc parameter...

CVE-2017-15984

Creative Management System CMS Lite 1.4 allows SQL Injection via the S parameter to index.php...

AdaptBB 1.0 Cross Site Scripting

| D R U N K E N | || || || D A N I S H | || || |' R E D N E C K S '--''--''--' RESEARCH AND FUCKING HACKING: | DRUNKEN DANISH REDNECKS | || || || !!!!!!! | || || |' [email protected] '--''--''--' = ADAPTBB 1.0 XSS | | "q" PARMETER IN INDEX.PHP @...

Vulnerability in ExpressionEngine

Здравствуйте 3APA3A! Сообщаю вам о найденной мною HTTP Response Splitting уязвимости в системе ExpressionEngine. Которая может быть использована в частности для проведения Cross-Site Scripting атаки. XSS: Уязвимость в скрипте index.php в параметре URL...

CVE-2007-3137

Multiple cross-site scripting XSS vulnerabilities in 4print.asp in WmsCMS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 sbl, 2 sbr, or 3 search parameter. NOTE: the original disclosure claims the pageid parameter in index.php is affected, but this is...

CVE-2002-0962

Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via 1 the url variable in the Link field of a calendar event, 2 the topic parameter in index.php, or 3 the title parameter in comment.php...