CVE-2021-43693

Vesta 0.9.8-24 is affected by a file inclusion vulnerability in web/add/user/index.php due to insufficient filtering and restriction on file references. This can be exploited to cause file inclusion, per CVE-2021-43693 and CNVD/CNNVD entries. The documents do not specify exploit details beyond th...

CVE-2021-43692: Improper Neutralization of Input During Web Page Generation

youtube-php-mirroring last update Jun 9, 2017 is affected by a Cross Site Scripting XSS vulnerability in file ytproxy/index.php...

CVE-2021-43693: Undefined Security Weakness

vesta 0.9.8-24 is affected by a file inclusion vulnerability in file web/add/user/index.php...

PT-2021-23918

Name of the Vulnerable Software and Affected Versions: vesta version 0.9.8-24 Description: The issue is related to a file inclusion vulnerability in the file web/add/user/index.php. This vulnerability may allow an attacker to include arbitrary files, potentially leading to code execution or other...

Made vesta 安全漏洞

Made vesta is a Made open source application. Made vesta version 0.9.8-24 contains a file inclusion vulnerability, which stems from a lack of filtering and restriction on file references in the web/add/user/index.php file, and can be exploited by attackers to cause file inclusion...

CVE-2021-41951

ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpresssso/pages/index.php via the wordpressuser parameter. If an attacker is able to persuade a victim to visit a crafted URL, malicious JavaScript content may be executed within the...

CVE-2021-41951: Improper Neutralization of Input During Web Page Generation

ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpresssso/pages/index.php via the wordpressuser parameter. If an attacker is able to persuade a victim to visit a crafted URL, malicious JavaScript content may be executed within the...

Sourcecodester Engineers Online Portal SQL Injection Vulnerability

Sourcecodester Engineers Online Portal is an open source online portal. Sourcecodester Engineers Online Portal in PHP is vulnerable to SQL injection, which can be exploited by attackers to bypass authentication via the login form in index.php...

PT-2021-30939

Уязвимость скрипта index.php микропрограммного обеспечения маршрутизатора D-Link DSL-3782 связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

CVE-2021-42665

CVE-2021-42665 affects the Sourcecodester Engineers Online Portal (PHP) via the login.php form. The vulnerability is an SQL Injection in the authentication routine that can allow bypassing login without valid credentials. Affected component is the login mechanism (username/password fields), with ...

CVE-2021-42665

An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication...

CVE-2021-39412: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities exists in PHPGurukul Shopping v3.1 via the 1 callback parameter in a serverside/scripts/idjsonp.php, b serverside/scripts/jsonp.php, and c scripts/objectsjsonp.php, the 2 value parameter in examplessupport/editableajax.php, and the 3 PHPSELF...

PT-2021-5308

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Event Booking and Reservation System affected versions not specified Description The issue exists due to the lack of measures to neutralize special elements, allowing a remote attacker to exploit it and potentially disclo...

PT-2021-23646

Name of the Vulnerable Software and Affected Versions Sourcecodester Engineers Online Portal affected versions not specified Description A security issue exists in the login form of the Sourcecodester Engineers Online Portal, specifically in the index.php file, allowing an attacker to bypass...

CVE-2021-42665: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication...

Sql injection

SQL Injection vulnerability in eyoucms cms v1.4.7, allows attackers to execute arbitrary code and disclose sensitive information, via the tid parameter to index.php...

xujinliang zibbs cross-site scripting vulnerability

Zibbs Zibbs Forum is a Bootstrap-based Php light forum system. xujinliang zibbs version 1.0 is vulnerable to a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of the route parameter in index.php. An attacker could use this vulnerability to execute...

PT-2021-10567

Name of the Vulnerable Software and Affected Versions: shadoweb wdja version 1.5.1 Description: A Cross Site Scripting XSS issue allows attackers to execute arbitrary code and gain escalated privileges via the backurl parameter to the "/php/passport/index.php" endpoint. Recommendations: For...

PT-2021-10996

Name of the Vulnerable Software and Affected Versions: eyoucms cms version 1.4.7 Description: The issue allows attackers to execute arbitrary code and disclose sensitive information. This is achieved via the tid parameter to the "index.php" endpoint. Recommendations: For eyoucms cms version 1.4.7...

CVE-2020-24000: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in eyoucms cms v1.4.7, allows attackers to execute arbitrary code and disclose sensitive information, via the tid parameter to index.php...