CVE-2016-10201: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the format parameter in a download log request to index.php...

PT-2017-7799

Name of the Vulnerable Software and Affected Versions Zoneminder versions 1.30 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the format parameter in a download log request to "index.php". Recommendations For Zoneminder...

CVE-2016-10202: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the path info to index.php...

PT-2017-7800

Name of the Vulnerable Software and Affected Versions Zoneminder versions 1.30 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the path info to "index.php"...

PT-2017-7802

Name of the Vulnerable Software and Affected Versions Zoneminder versions 1.30 and earlier ALT Linux affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the limit parameter in a log query request to "index.php"...

CVE-2016-10204: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Zoneminder 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the limit parameter in a log query request to index.php...

CVE-2017-6390

An issue was discovered in whatanime.ga before c334dd8499a681587dd4199e90b0aa0eba814c1d. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "whatanime.ga-master/index.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the...

PT-2017-17031

Name of the Vulnerable Software and Affected Versions whatanime.ga versions prior to c334dd8499a681587dd4199e90b0aa0eba814c1d Description The issue is caused by insufficient filtration of user-supplied data passed to the "whatanime.ga-master/index.php" URL. This allows an attacker to execute...

CVE-2017-6390: Improper Neutralization of Input During Web Page Generation

An issue was discovered in whatanime.ga before c334dd8499a681587dd4199e90b0aa0eba814c1d. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "whatanime.ga-master/index.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the...

Joomla GPS Tools 4.0.1 SQL Injection

Exploit Title: Joomla! Component GPS Tools v4.0.1 - SQL Injection Google Dork: inurl:index.php?option=comgpstools Date: 24.02.2017 Vendor Homepage: http://corejoomla.com/ Software Buy: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/gps-tools/ Demo:...

Joomla com_jajobboard v1.5 - SQL Injection Vulnerability

Document Title: =============== Joomla comjajobboard v1.5 - SQL Injection Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2036 Release Date: ============= 2017-02-25 Vulnerability Laboratory ID VL-ID: ====================================...

Joomla MultiTier 3.1 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component MultiTier v3.1 - SQL Injection Google Dork: inurl:index.php?option=commultitier Date: 23.02.2017 Vendor Homepage: http://www.beesto.com/ Software Buy:...

Joomla Community Surveys 4.3 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Community Surveys v4.3 - SQL Injection Google Dork: inurl:index.php?option=comcommunitysurveys Date: 24.02.2017 Vendor Homepage: http://corejoomla.com/ Software Buy:...

Joomla! Component BookLibrary 3.6.1 - SQL Injection

Joomla! Component BookLibrary 3.6.1 - SQL Injection Exploit Title: Joomla! Component BookLibrary v3.6.1 - SQL Injection Google Dork: inurl:index.php?option=combooklibrary Date: 22.02.2017 Vendor Homepage: http://ordasoft.com/ Software Buy:...

Joomla Magic Deals Web 1.2.0 SQL Injection

Exploit Title: Joomla! Component Magic Deals Web v1.2.0 - SQL Injection Google Dork: inurl:index.php?option=commagicdealsweb Date: 21.02.2017 Vendor Homepage: http://jasonwebdesign.com/ Software Buy: https://extensions.joomla.org/extensions/extension/e-commerce/gifts-a-coupons/magic-deals-web/...

Joomla! Component BookLibrary 3.6.1 - SQL Injection

Exploit Title: Joomla! Component BookLibrary v3.6.1 - SQL Injection Google Dork: inurl:index.php?option=combooklibrary Date: 22.02.2017 Vendor Homepage: http://ordasoft.com/ Software Buy: https://extensions.joomla.org/extensions/extension/living/education-a-culture/booklibrary-basic/ Demo:...

Joomla! Component Magic Deals Web 1.2.0 - SQL Injection

Exploit Title: Joomla! Component Magic Deals Web v1.2.0 - SQL Injection Google Dork: inurl:index.php?option=commagicdealsweb Date: 21.02.2017 Vendor Homepage: http://jasonwebdesign.com/ Software Buy: https://extensions.joomla.org/extensions/extension/e-commerce/gifts-a-coupons/magic-deals-web/...

igup.urfu.ru XSS vulnerability

Vulnerable URL: http://igup.urfu.ru/index.php/article/search/?SearchText=testprompt/OPENBUGBOUNTY/...

Joomla Joomloc-Lite 1.3.2 SQL Injection

Exploit Title: Joomla! Component Joomloc-Lite v1.3.2 - SQL Injection Google Dork: inurl:index.php?option=comjoomloc Date: 18.02.2017 Vendor Homepage: http://www.joomloc.fr.nf/ Software Buy: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/joomloc-lite/...

Joomla! Component OS Services Booking 2.5.1 - SQL Injection

Joomla! Component OS Services Booking 2.5.1 - SQL Injection Exploit Title: Joomla! Component OS Services Booking v2.5.1 - SQL Injection Google Dork: inurl:index.php?option=comosservicesbooking Date: 18.02.2017 Vendor Homepage: https://www.joomdonation.com/ Software Buy:...