PT-2021-17830

Name of the Vulnerable Software and Affected Versions: PbootCMS version 3.0.4 Description: The issue allows for SQL injection through the search parameter in index.php, potentially revealing sensitive information and enabling the addition of an admin account. Recommendations: For PbootCMS version...

PT-2021-18175

Name of the Vulnerable Software and Affected Versions: Ovidentia CMS versions 6.x Description: The issue concerns a SQL injection vulnerability. Specifically, it affects the id parameter of the "index.php" endpoint. An attacker can extract and display the checkbox property from text data in eithe...

CVE-2021-29343: Improper Neutralization of Special Elements used in an SQL Command

Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php. The "checkbox" property into "text" data can be extracted and displayed in the text region or in source code...

CVE-2021-29027

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/index.php URI...

CVE-2021-29027

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/index.php URI...

CVE-2021-29030: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/index.php URI...

CVE-2021-29027: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/index.php URI...

PT-2021-18031

Name of the Vulnerable Software and Affected Versions: Bitweaver version 3.1.0 Description: A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the "/users/index.php" API endpoint. This enables attackers to execute malicious scripts on the client-side. Recommendation...

PT-2021-18034

Name of the Vulnerable Software and Affected Versions: Bitweaver version 3.1.0 Description: A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the "/users/admin/index.php" API endpoint. This enables attackers to execute malicious scripts on the client-side...

CVE-2021-27530: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allow remote attacker to inject javascript via URI in /index.php...

PT-2021-17498

Name of the Vulnerable Software and Affected Versions DynPG version 4.9.2 Description A cross-site scripting XSS issue allows a remote attacker to inject javascript via the URI in the "/index.php" API endpoint. This can be exploited by manipulating the javascript code injected into the URI...

CVE-2021-27519

A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter...

CVE-2021-27520

A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter...

Cross site scripting

A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter...

CVE-2021-27519

A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter...

CVE-2021-27519

A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter...

CVE-2021-27520

A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter...

PT-2021-17491

Name of the Vulnerable Software and Affected Versions FUDForum version 3.1.0 Description A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the "index.php" endpoint in the srch parameter. Recommendations For FUDForum version 3.1.0, consider disabling the srch...

PT-2021-17492

Name of the Vulnerable Software and Affected Versions FUDForum version 3.1.0 Description A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the "index.php" endpoint in the author parameter. Recommendations For FUDForum version 3.1.0, as a temporary workaround,...

CVE-2021-27520: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter...