infob.de XSS vulnerability

Vulnerable URL: https://www.infob.de/index.php?go=on=1"...

Cross site scripting

In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS...

CVE-2017-10667: Improper Neutralization of Input During Web Page Generation

In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS...

CVE-2017-10667

In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS...

PT-2017-11420

Name of the Vulnerable Software and Affected Versions Zen Cart version 1.6.0 Description The issue is related to a potential XSS problem. In the index.php file, the products id parameter can cause XSS. Recommendations For Zen Cart version 1.6.0, avoid using the products id parameter in the affect...

members.peoplefu.com XSS vulnerability

Vulnerable URL: http://members.peoplefu.com/index.php?word=1/-///'/"//--...

Sql injection

SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account...

CVE-2017-9759

The vulnerability is a SQL Injection in the open-source CMS Zenbership version 1.0.8, located in the admin/index.php handling the filters array parameter. The issue is exploitable by a privileged account, as described in CVE-2017-9759. The connected sources consistently report this exact flaw but...

CVE-2017-9759: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account...

PT-2017-19166

Name of the Vulnerable Software and Affected Versions Zenbership version 1.0.8 Description A SQL Injection issue exists in the admin/index.php file of Zenbership, specifically via the filters array parameter. This issue can be exploited by an attacker with a privileged account. Recommendations Fo...

IBM Informix Dynamic Server index.php testconn Heap Buffer Overflow (CVE-2017-1092)

A heap buffer overflow exists in IBM's Informix Dynamic Server and Informix Open Admin Tool. The vulnerability is due an input validation error when processing requests sent to index.php. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request...

CVE-2017-9674

In SimpleCE 2.3.0, an authenticated XSS vulnerability was found on index.php/content/text/1?returnurl=XSS exploitable as a regular or admin user...

Cross site scripting

In SimpleCE 2.3.0, an authenticated XSS vulnerability was found on index.php/content/text/1?returnurl=XSS exploitable as a regular or admin user...

CVE-2017-9673

In SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account via the index.php/user/new URI or change its settings via the index.php/user/1 URI, including its password...

CVE-2017-9674

In SimpleCE 2.3.0, an authenticated XSS vulnerability was found on index.php/content/text/1?returnurl=XSS exploitable as a regular or admin user...

CVE-2017-9674

CVE-2017-9674 affects SimpleCE 2.3.0. An authenticated cross-site scripting (XSS) vulnerability exists on the endpoint index.php/content/text/1?return_url=[XSS], exploitable by a regular user or an admin user. The issue is described consistently across multiple sources in the connected documents,...

CVE-2017-9673: Cross-Site Request Forgery (CSRF)

In SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account via the index.php/user/new URI or change its settings via the index.php/user/1 URI, including its password...

PT-2017-19108

Name of the Vulnerable Software and Affected Versions SimpleCE version 2.3.0 Description A CSRF issue can be exploited to add an administrator account or change its settings, including the password, by accessing specific API endpoints such as "index.php/user/new" or "index.php/user/1"...

CVE-2017-9674: Improper Neutralization of Input During Web Page Generation

In SimpleCE 2.3.0, an authenticated XSS vulnerability was found on index.php/content/text/1?returnurl=XSS exploitable as a regular or admin user...

PT-2017-19109

Name of the Vulnerable Software and Affected Versions SimpleCE version 2.3.0 Description An authenticated XSS issue was discovered, allowing exploitation as a regular or admin user. The issue is exploitable through the "index.php/content/text/1?return url=XSS" endpoint, where the return url...