hotelanassa.gr XSS vulnerability

Vulnerable URL: http://www.hotelanassa.gr/info.php?catid=13'"3 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4743231 VIP website status:| No Coordinated Disclosure Timeline:...

shagomer-shop.ru XSS vulnerability

Vulnerable URL: http://shagomer-shop.ru/info.php?t=%27%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 24.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4680389 VIP website status:| No...

Cross site request forgery (csrf)

BlackCat CMS 1.2 allows remote authenticated users to inject arbitrary PHP code into info.php via a crafted newmodulename parameter to backend/addons/ajaxcreate.php. NOTE: this can be exploited via CSRF...

CVE-2017-14048

BlackCat CMS 1.2 allows remote authenticated users to inject arbitrary PHP code into info.php via a crafted newmodulename parameter to backend/addons/ajaxcreate.php. NOTE: this can be exploited via CSRF...

CVE-2017-14048

BlackCat CMS 1.2 allows remote authenticated users to inject arbitrary PHP code into info.php via a crafted newmodulename parameter to backend/addons/ajaxcreate.php. NOTE: this can be exploited via CSRF...

CVE-2017-14048: Cross-Site Request Forgery (CSRF)

BlackCat CMS 1.2 allows remote authenticated users to inject arbitrary PHP code into info.php via a crafted newmodulename parameter to backend/addons/ajaxcreate.php. NOTE: this can be exploited via CSRF...

cedarcreekinn.com XSS vulnerability

Vulnerable URL: http://www.cedarcreekinn.com/info.php?for=1"...

ackermann-leather.com XSS vulnerability

Vulnerable URL: http://www.ackermann-leather.com/info.php?L=1...

ackermann-leder.de XSS vulnerability

Vulnerable URL: http://www.ackermann-leder.de/info.php?L=1...

sandta.org.za XSS vulnerability

Vulnerable URL: https://www.sandta.org.za/info.php?cpc=111"alert/OPENBUGBOUNTY/...

adiregisterme.com XSS vulnerability

Vulnerable URL: https://adiregisterme.com/show-info.php?showid="alert/OPENBUGBOUNTY/...

da.zaoorel.ru XSS vulnerability

Vulnerable URL: http://da.zaoorel.ru/proinfo/info.php?proname=gtetris' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

PHP Utility Belt Remote Code Execution

Exploit Title : PHP utility belt Remote Code Execution vulnerability Author : WICS Date : 8/12/2015 Software Link : https://github.com/mboynes/php-utility-belt Overview: PHP utility belt is a set of tools for PHP developers. Install in a browser-accessible directory and have at it. ajax.php is...

explorersweb.com XSS vulnerability

Open Bug Bounty ID: OBB-64126 Description| Value ---|--- Affected Website:| explorersweb.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2014-8351

SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty aka CNIL CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter...

Sql injection

SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty aka CNIL CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter...

CVE-2014-8351

CVE-2014-8351 concerns CNIL CookieViz (info.php) prior to 1.0.1, where a SQL injection via the domain parameter allows remote servers to execute arbitrary SQL commands. The vulnerability affects CookieViz’s handling of input in info.php, enabling attacker-controlled SQL execution. Public referenc...

CVE-2014-8351

SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty aka CNIL CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter...

CVE-2014-8351: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty aka CNIL CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter...

CVE-2014-3830

CVE-2014-3830 relates to a reflected XSS in TomatoCart 1.1.8.6.1, exploiting the faqs_id parameter in info.php to inject script/HTML. The description confirms the affected product/version and the vulnerability class, but the available documents do not specify a vendor patch/version for remediatio...