365 matches found
CVE-2018-5072
Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...
usfca.edu XSS vulnerability
Open Bug Bounty ID: OBB-466666 Description| Value ---|--- Affected Website:| usfca.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
CVE-2017-17896
Readymade Job Site Script has XSS via the keyword parameter to the /job URI...
CVE-2017-17896
Readymade Job Site Script has XSS via the keyword parameter to the /job URI...
PHP Scripts Mall Readymade Job Site Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Readymade Job Site Script is a PHP based job site script by PHP Scripts Mall India. The script includes features like job management, profile management and email notifications. A cross-site scripting vulnerability exists in PHP Scripts Mall Readymade Job Site Script. A remote...
CVE-2017-17896
CVE-2017-17896 affects Readymade Job Site Script with a cross-site scripting (XSS) vulnerability via the keyword parameter to the /job URI. The NVD entry reports a base score of 4.3 (CVSS2) and 6.1 (CVSS3), indicating that network access is required and user interaction is involved in a changed s...
CVE-2017-17642
Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...
CVE-2017-17642
Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...
CVE-2017-17623
Opensource Classified Ads Script 3.2 has SQL Injection via the advanceresult.php keyword parameter...
Sql injection
Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...
CVE-2017-17623
Opensource Classified Ads Script 3.2 is affected by a SQL Injection via the keyword parameter in advance_result.php. Multiple sources (NVD/CVE listings and CNVD/CVE records) confirm an injectable vulnerability in this version, with CVSS scores indicating HIGH/CRITICAL severity (NVD CVSS2: 7.5 HIG...
CVE-2017-17623
Opensource Classified Ads Script 3.2 has SQL Injection via the advanceresult.php keyword parameter...
CVE-2017-17642
Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...
CVE-2017-16955
SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows authenticated users to execute arbitrary SQL commands via the "keyword" parameter to /wp-admin/options-general.php?page=inlinks/inlinks.php...
CVE-2017-16955
SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows authenticated users to execute arbitrary SQL commands via the "keyword" parameter to /wp-admin/options-general.php?page=inlinks/inlinks.php...
NexusPHP Cross-Site Scripting Vulnerability (CNVD-2017-32401)
NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A cross-site scripting vulnerability exists in NexusPHP version 1.5. A remote attacker can exploit this vulnerability by sending the 'keyword' parameter to the messages.php file to obtain the...
Cross site scripting
XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php...
CVE-2017-15305
XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php...