ZeusCart 4 index.php brand&schltr 跨站脚本漏洞

ZeusCart是一个电子商务购物车应用。 ZeusCart处理 brand 和 schltr 参数存在跨站脚本漏洞，远程攻击者可以利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 影响系统：ZeusCart 4 CVE ID:CVE-2015-2182 CNCVE ID：CNCVE-20152182 漏洞发布时间:2015-03-10 自行搭建环境进行POC测试：ZeusCart 4.1...

PT-2015-6768

Name of the Vulnerable Software and Affected Versions X2Engine X2CRM versions prior to 5.2 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that create an administrative account via a crafted request to...

OpenSNS_v1.7.1_index.php_sql注入

No description provided by source...

Espcms v5.0 /index.php SQL注入漏洞

构造www.xxx.cc/index.php?ac=search&at=taglist&tagkey=%2527,tags orselect 1 fromselect count,concatselect select concat0x7e,0x27,tablename,0x27,0x7e from informationschema.tables where tableschema=database limit 0,1,floorrand02x from informationschema.tables group by xa%23...

Nibbleblog 'index.php'存在多个跨站脚本漏洞

No description provided by source...

PT-2015-2581

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 8.0.6 ownCloud Server versions 8.1.x prior to 8.1.1 Description The issue allows remote authenticated users to list directory contents and possibly cause a denial of service via a .. dot dot in the dir paramet...

genixcms 0.0.1 /index.php SQL注入漏洞

No description provided by source...

GeniXCMS 0.0.1 /index.php CSRF漏洞

No description provided by source...

PT-2015-7403

Name of the Vulnerable Software and Affected Versions Joomla! component com googlesearch cse version 3.0.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the q parameter to "index.php". Recommendations For version 3.0.2, avoid using...

CVE-2015-6919: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the googleSearch CSE comgooglesearchcse component 3.0.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the q parameter to index.php...

CVE-2015-2989

Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter...

CVE-2015-2989

Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter...

CVE-2015-2989

CVE-2015-2989 (LEMON-S PHP Twit BBS) is a cross-site scripting (XSS) vulnerability in the index.php script caused by unsafely processing the imagetitle parameter. The affected software is the Twit BBS PHP-based bulletin board. Impact as stated: remote attackers can inject arbitrary web script or ...

CVE-2015-2989: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter...

PT-2015-6034

Name of the Vulnerable Software and Affected Versions LEMON-S PHP Twit BBS affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the imagetitle parameter in the "index.php" file. This could...

phpcms v9 /modules/phpsso/index.php SQL注入漏洞

No description provided by source...

CVE-2015-6809

Multiple cross-site scripting XSS vulnerabilities in BEdita before 3.6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 cfgprojectName parameter to index.php/admin/saveConfig, the 2 datastatsproviderurl parameter to index.php/areas/saveArea, or the 3 datadescription...

CVE-2015-6809

Multiple cross-site scripting XSS vulnerabilities in BEdita before 3.6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 cfgprojectName parameter to index.php/admin/saveConfig, the 2 datastatsproviderurl parameter to index.php/areas/saveArea, or the 3 datadescription...

CVE-2015-6809: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in BEdita before 3.6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 cfgprojectName parameter to index.php/admin/saveConfig, the 2 datastatsproviderurl parameter to index.php/areas/saveArea, or the 3 datadescription...

PT-2015-7365

Name of the Vulnerable Software and Affected Versions BEdita versions prior to 3.6.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the cfgprojectName parameter to "index.php/admin/saveConfig", the datastats provider url parameter to...