WordPress WP Photo Album Plus Plugin <= 4.9.2 - XSS

This plugin is prone to index.php wppa-tag parameter cross site scripting vulnerability. Solution Update the plugin...

WordPress xili-language Plugin <= 2.8.5 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in index.php lang parameter. Solution Update the plugin...

WordPress WooCommerce Predictive Search Plugin <= 1.0.5 - XSS

This plugin is prone to a cross site scripting vulnerability in index.php rs parameter. Solution Update the plugin...

CVE-2015-2250: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject arbitrary web script or HTML via the 1 bannedword parameter to index.php/dashboard/system/conversations/bannedwords/success, 2 channel parameter to index.php/dashboard/reports/logs/view, 3...

Sql injection

Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 userpass parameter in gologin.php or the PATHINFO to 3 gologin/validatecredentials/admin/ or 4 index.php/gosite/gogetuserinfo/...

Pragyan 3.0 /index.php SQL注入漏洞

No description provided by source...

ProjectSend r561 CSRF / XSS / Shell Upload

Author: TUNISIAN CYBER + Title: ProjectSend Multiple Vulnerabilities + Date: 25-04-2015 + Vendor: http://www.projectsend.org/ + Download:http://www.projectsend.org/download/67/ + Type: WebAPP + Tested on: KaliLinux Debian + Twitter: @TCYB3R It's a long one so let's start... I/ CSRF: Add Admin...

ProjectSend r561 Multiple Vulnerabilities

ProjectSend version r561 suffers from cross site request forgery, cross site scripting, and remote shell upload vulnerabilities. + Author: TUNISIAN CYBER + Title: ProjectSend r561 Multiple Vulnerabilities + Date: 25-04-2015 + Vendor: http://www.projectsend.org/ +...

CVE-2012-2932: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in TinyWebGallery TWG before 1.8.8 allow remote attackers to inject arbitrary web script or HTML via the selitems parameter in a 1 copy, 2 chmod, or 3 arch action to admin/index.php or 4 searchitem parameter in a search action to admin/index.php...

CVE-2012-2930: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in TinyWebGallery TWG before 1.8.8 allow remote attackers to hijack the authentication of administrators for requests that 1 add a user via an adduser action to admin/index.php or 2 conduct static PHP code injection attacks in .htusers.php...

PT-2015-3524

Name of the Vulnerable Software and Affected Versions TinyWebGallery versions prior to 1.8.8 Description The issue allows remote attackers to hijack the authentication of administrators for requests. This can be done in two ways: by adding a user via an "adduser" action to "admin/index.php" or by...

CVE-2014-9146

Multiple cross-site scripting XSS vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to inject arbitrary web script or HTML via the 1 view, 2 id, 3 page, or 4 app parameter to the default URI or the 5 act parameter to dapur/index.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to inject arbitrary web script or HTML via the 1 view, 2 id, 3 page, or 4 app parameter to the default URI or the 5 act parameter to dapur/index.php...

CVE-2015-2926: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Php/stats/statsRecent.inc.php in phpTrafficA 2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTTP User-Agent header to index.php...

CVE-2014-9145: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an edit action to dapur/index.php; 2 cat, 3 user, or 4 level parameter to dapur/apps/apparticle/controller/articlelist.php; or 5 email parameter in an emai...

PT-2015-5980

Name of the Vulnerable Software and Affected Versions phpTrafficA versions 2.3 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the HTTP User-Agent header to "index.php"...

dyp2p v3.0 index.php SQL注入漏洞

No description provided by source...

LionWiki /index.php 任意文件下载漏洞

No description provided by source...

DamiCMS v2.2 /index.php 代码执行漏洞

No description provided by source...

Joomla index.php Multiple Parameter XSS - Ver2 (CVE-2011-2710)

A cross-site scripting vulnerability has been reported in Joomla. The vulnerability is due to the script not validating input appended to the URL or passed via the 'searchword', 'extension', 'asset', 'author' parameters upon submission to the index.php script. Successful exploitation of this...