622 matches found
CVE-2018-15679
An issue was discovered in BTITeam XBTIT 2.5.4. The "keywords" parameter in the search function available at /index.php?page=forums&action=search is vulnerable to reflected cross-site scripting...
WUZHI CMS SQL Injection Vulnerability (CNVD-2018-18141)
WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A SQL injection vulnerability exists in the /coreframe/app/admin/copyfrom.php file in WUZHI CMS version 4.1.0. A remote attacker can exploit this vulnerability by...
Cross site scripting
An issue was discovered in WeaselCMS v0.3.5. XSS exists via Site Language, Site Title, Site Description, and Site Keywords on the SETTINGS page...
WeaselCMS Cross-Site Scripting Vulnerability
WeaselCMS is a lightweight content management system CMS written in PHP. A cross-site scripting vulnerability exists in WeaselCMS version 0.3.5. A remote attacker can exploit this vulnerability to execute JavaScript code via the Site Language, Site Title, Site Description, and Site Keywords field...
CVE-2018-14515
A SQL injection was discovered in WUZHI CMS 4.1.0 that allows remote attackers to inject a malicious SQL statement via the index.php?m=promote&f=index&v=search keywords parameter...
CVE-2018-14515
CVE-2018-14515 affects WUZHI CMS 4.1.0 and enables a remote SQL injection through the parameter in the URL index.php?m=promote&f=index&v=search keywords. Public reports describe an injection vector in the search keywords field, allowing attacker-controlled SQL statements. NVD lists CVSSv2 base sc...
WUZHI CMS SQL Injection Vulnerability (CNVD-2018-14091)
WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A SQL injection vulnerability exists in WUZHI CMS version 4.1.0. A remote attacker can inject malicious SQL statements by sending the 'keywords' parameter to the...
WUZHI CMS SQL Injection Vulnerability (CNVD-2018-15403)
WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system. WUZHI CMS 4.1.0 version of the coreframe/app/order/admin/goods.php file there is a SQL injection vulnerability, the vulnerability stems from the program does not filte...
Zomato: XSS in "explore-keywords-dropdown" results.
It seems that people have exploited this vulnerability before on this website, however, it remains unpatched, so here I am reporting the vulnerability. A XSS vulnerability exists when a restaurant or dish is created with a malicious name. The title of the dish or restaurant is not properly filter...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-08556)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit the...
iCMS Cross-Site Scripting Vulnerability (CNVD-2018-08925)
iCMS is a content management system CMS built with PHP and MySQL databases. A cross-site scripting vulnerability exists in iCMS version 7.0.8. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of the 'keywords' parameter...
CVE-2018-10250
iCMS V7.0.8 has XSS via the admincp.php keywords parameter in a weixincategory action, aka a WeChat Classified Management keyword search...
us-army-military-shop.de XSS vulnerability
Open Bug Bounty ID: OBB-602693 Description| Value ---|--- Affected Website:| us-army-military-shop.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2014-4612
Cross-site scripting XSS vulnerability in the keywords manager keywordmgr.php in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-4612
Cross-site scripting XSS vulnerability in the keywords manager keywordmgr.php in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
SQL Injection Vulnerability in iCMS v7.0.7 keywords.admincp.php Page
iCMS is a free, clean, efficient, and useful PHP content management system. A SQL injection vulnerability exists in the iCMS v7.0.7 keywords.admincp.php page. The vulnerability stems from the orderby parameter being brought into the database for execution without any processing. An attacker can...
PSNews Website 1.0.0 - Keywords SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: PSNews Website Same Backend with Mobile Apps 1.0.0 - 'Keywords' SQL Injection Dork: N/A Date: 2018-02-16 Exploit Author: Borna nematzadeh L0RD or email protected Vendor Homepage:...
shop.excite.co.id XSS vulnerability
Open Bug Bounty ID: OBB-557951 Description| Value ---|--- Affected Website:| shop.excite.co.id Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Classified Ads CMS Quickad SQL Injection Vulnerability
Classified Ads CMS Quickad is a set of PHP based advertising website scripts. A SQL injection vulnerability exists in Classified Ads CMS Quickad version 4.0. A remote attacker can exploit this vulnerability by sending the 'keywords', 'placeid', 'cat', or 'subcat' parameters to the listing URI to...