13 matches found
CVE-2024-24945: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in Travel Journal Using PHP and MySQL with Source Code v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Share Your Moments parameter at /travel-journal/write-journal.php...
CVE-2024-24041: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in Travel Journal Using PHP and MySQL with Source Code v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the location parameter at /travel-journal/write-journal.php...
jupiter.wharton.upenn.edu XSS vulnerability
Vulnerable URL: http://jupiter.wharton.upenn.edu/sidelnikov/journal.php?id=%27%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...
CVE-2006-6835: Undefined Security Weakness
SQL injection vulnerability in Journal.inc.php in Neocrome Land Down Under LDU 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the w parameter to journal.php...
LDU <= 8.x (journal.php) SQL Injection Vulnerability
BhhGroup.Org & Trtekforum.com Found By : St@rExT script name : LandDownUnder LDU Version : All Dork : "Powered by LDU" Script sites : http://www.neocrome.net Vull name : LDU = 8.x journal.php SQL Injection Vulnerability Vulnerable file : Journal.inc.php...
ldu-sql.txt
BhhGroup.Org & Trtekforum.com Found By : St@rExT script name : LandDownUnder LDU Version : All Dork : "Powered by LDU" Script sites : http://www.neocrome.net Vull name : LDU = 8.x journal.php SQL Injection Vulnerability Vulnerable file : Journal.inc.php...
CVE-2005-3367
Cross-site scripting XSS vulnerability in journal.php in SparkleBlog 2.1 allows remote attackers to inject arbitrary web script or HTML via the name field...
CVE-2005-3367
The CVE-2005-3367 entry concerns a Cross-site Scripting (XSS) vulnerability in SparkleBlog 2.1, specifically in journal.php where the name field can be injected with arbitrary script/HTML. Evidence from the NVD/CVE records confirms the affected software (SparkleBlog 2.1) and the vulnerable compon...
CVE-2005-3367: Undefined Security Weakness
Cross-site scripting XSS vulnerability in journal.php in SparkleBlog 2.1 allows remote attackers to inject arbitrary web script or HTML via the name field...
CVE-2005-2674
Affected product: Land Down Under (LDU) 800 series (
CVE-2005-2675: Undefined Security Weakness
Note: the vendor has disputed this issue. Multiple SQL injection vulnerabilities in Land Down Under LDU 800 allow remote attackers to execute arbitrary SQL commands via the 1 s or 2 m parameter to forums.php, 3 o, 4 w, 5 s, or 6 p parameter to list.php, 7 m parameter to journal.php, 8 x or 9 n...
CVE-2005-2674: Undefined Security Weakness
Note: the vendor has disputed this issue. Multiple cross-site scripting XSS vulnerabilities in Land Down Under LDU 800 allow remote attackers to inject arbitrary web script or HTML via the 1 c or 2 m parameters to index.php or 3 w parameter to journal.php. NOTE: this issue has been disputed by th...
