SQL injection vulnerability in keyword parameter of xycms manage_book.php page

XYCMS was formerly known as Nanjing XYCMS Enterprise Building System. A SQL injection vulnerability exists in the keyword parameter of the xycms managebook.php page. The vulnerability stems from the failure to filter the keyword parameter sufficiently, which can be exploited by an attacker to...

SQL Injection Vulnerability in Keyword Parameter of School Website Management System

The SchoolWise School Website Management System is a content management system for primary and secondary school websites. A SQL injection vulnerability exists in the Keyword parameter of the School Worry-Free School Website Management System. It allows attackers to exploit the vulnerability to...

Reflected Cross-Site Scripting Vulnerability in 'keyword' Parameter of Qibo B2B Commerce System

Qibo B2B business system is an open source content management system . Qibo B2B Commerce System 'keyword' parameter reflects cross-site scripting vulnerability. Allows attackers to insert XSS execution code into web forms, there are phishing attacks, user cookie theft and other security risks...

qoo10.cn XSS vulnerability

Vulnerable URL: https://www.qoo10.cn/s/SCRIPT-SVG-ONLOAD-CONFIRM-OPENBUGBOUNTY?keyword='--!'...

SQL Injection Vulnerability in cid and keyword parameters of KenCMS V1.1 Enterprise Membership Experience Edition System

KenCMS is a content management system. A SQL injection vulnerability exists in the KenCMS V1.1 Enterprise Member Experience system. The lack of filtering of the 'cid' and 'keyword' parameters allows an attacker to exploit the vulnerability to obtain sensitive information from the database...

binakonstruksi.pu.go.id XSS vulnerability

Vulnerable URL: http://binakonstruksi.pu.go.id/v2/portal2/user/view.php?keyword=bpsprov=bpskabkota=balai===bidang=3kualifikasi==klasifikasi==pelatihanuserview=10prov=balai===Cipta Karya⊂=pelatihanprompt/OPENBUGBOUNTY/...

omeganationalproducts.com XSS vulnerability

Vulnerable URL: http://www.omeganationalproducts.com/php/products.php?keyword=aasa"alert/OPENBUGBOUNTY/...

SQL Injection Vulnerability in the Keyword Parameter of Digital Newspaper System of Joyful Reading Kiosk

Joyful Reading Kiosk Digital Newspaper System is a digital newspaper WEB management system. A SQL injection vulnerability exists in the keyword parameter of the Joyfully Reading Kiosk Digital Newspaper System. An attacker can exploit the vulnerability to obtain database information...

ottawacity.ca XSS vulnerability

Vulnerable URL: http://www.ottawacity.ca/index.php?keyword=...

comebagshop.com XSS vulnerability

Vulnerable URL: http://comebagshop.com/index.php?keyword=...

Dtcms Search Page Cross-Site Scripting Vulnerability

dtcms is a content management system developed based on c. There is a cross-site scripting vulnerability in the keyword parameter of search.html on the front page of Dtcms, which can be controlled by an attacker to obtain the user's cookie information...

CVE-2014-100030

Cross-site scripting XSS vulnerability in module/search/function.php in Ganesha Digital Library GDL 4.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a ByEge action...

CVE-2014-100030

CVE-2014-100030 describes an XSS vulnerability in the Ganesha Digital Library (GDL) 4.2. The flaw is in the file module/search/function.php and allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a ByEge action. The available sources indicate the affected s...

Ganesha Digital Library跨站脚本漏洞

Ganesha Digital Library是一款数字图书馆程序。 由于通过"keyword" GET参数传递到gdl.php的输入当"mod"设置为"search"，"action"设置为任意值在返回用户前未能正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。 0 Ganesha Digital Library 4.2 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://kmrg.itb.ac.id/...

CVE-2010-4913

The OpenVAS entry confirms that ColdGen ColdUserGroup is prone to both Cross-Site Scripting (XSS) and SQL Injection vulnerabilities. The CVE-2010-4913 entry describes an XSS flaw in the search feature of ColdGen ColdUserGroup 1.06, exploitable via the Keywords parameter to inject arbitrary script...

CVE-2010-2609

SQL injection vulnerability in showsearchresult.php in 2daybiz Job Search Engine Script allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

CVE-2010-2611

SQL injection vulnerability in showsearchresult.php in i-netsolution Job Search Engine allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

Sql injection

SQL injection vulnerability in showsearchresult.php in i-netsolution Job Search Engine allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

CVE-2010-2509

The CVE-2010-2509 entries describe cross-site scripting vulnerabilities in 2daybiz Web Template Software. The affected components are the category.php file (parameter: keyword) and memberlogin.php (parameter: password). The underlying issue is improper handling of user-supplied input leading to s...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in TomatoCMS 2.0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 keyword or 2 article-id parameter in conjunction with a /admin/news/article/list PATHINFO; the 3 keyword parameter in conjunction...