CVE-2018-6355

/goform/setLang on iBall 300M devices with "iB-WRB302N1.0.1-Sep 8 2017" firmware has Unauthenticated Stored Cross Site Scripting via the lang parameter...

var.astro.cz XSS vulnerability

Open Bug Bounty ID: OBB-311805 Description| Value ---|--- Affected Website:| var.astro.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

callens-fg.be XSS vulnerability

Open Bug Bounty ID: OBB-284037 Description| Value ---|--- Affected Website:| callens-fg.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Tiki Wiki CMS Groupware Cross-Site Scripting Vulnerability (CNVD-2017-16010)

Tiki Wiki CMS Groupware is a suite of open source content management and portal applications from the Tiki software community that can be used to create web applications, portals, corporate intranets, extranets, and more. A cross-site scripting vulnerability exists in the TikiFilter.php file in...

Cross site scripting

TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS...

CVE-2017-7886

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...

Sql injection

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...

CVE-2017-7886

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...

CVE-2017-7886

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...

CVE-2017-7886

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...

PT-2017-17973 · Dolibarr · Dolibarr Erp/Crm

Name of the Vulnerable Software and Affected Versions: Dolibarr ERP/CRM version 4.0.4 Description: The issue is related to SQL Injection in the doli/theme/eldy/style.css.php file via the lang parameter. Recommendations: For version 4.0.4, avoid using the lang parameter in the affected file until...

XSS Cross-Site Scripting Vulnerability in Apabi Thesis Authorization Submission System of Beijing Founder Apabi Technology Co.

Apabi Thesis Authorization Submission System is a thesis submission system that can be used by college libraries to collect students' theses developed by Beijing Founder Apabi Technology Co. A cross-site scripting vulnerability exists in the Apabi Thesis Authorization Submission System of Beijing...

F3 designs Website SQL Injection Vulnerability

F3 designs is a custom website design and development framework. A SQL injection vulnerability exists in the lang parameter of the index.php page of F3 designs. Because the program fails to adequately filter user-submitted input, an attacker could use this vulnerability to compromise the...

CrossComm SQL Injection Vulnerability

CrossComm is a mobile and web application development studio. An SQL injection vulnerability exists in the lang parameter of CrossComm's index.php page, which can be used by an attacker to take control of the application, access or modify data, or exploit a potential vulnerability in the underlyi...

PHPSYSINFO Local File Disclosure Vulnerability

phpsysinfo is a php script tool software that supports php web server for detecting some information about the host. A local file disclosure vulnerability exists in the lang parameter of the language.php page in PHPSYSINFO version 3.1.12, which can be exploited by attackers to obtain sensitive...

oslo.geodata.es XSS vulnerability

Vulnerable URL: http://oslo.geodata.es/elpraturb/urbanisme.php?lang=es";...

microring.am XSS vulnerability

Vulnerable URL: http://www.microring.am/index.php?lang=arm" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10196302 VIP website status:| No Check microring.am SSL connection:| Grad...

DM enterprise built Station system \indexDM_load.php variable lang SQL injection

No description provided by source...

pp-telascica.hr XSS vulnerability

Vulnerable URL: http://pp-telascica.hr/index.php?lang=en'"/alert/openbugbounty/...

Sophos UTM Nessus Web UI Cross-Site Scripting Vulnerability

Sophos UTM is a unified threat management appliance. which provides gateway security and endpoint security. The appliance provides gateway security protection and endpoint security protection.Nessus Web UI is one of the components used to access the Nessus Vulnerability Scanner based on a web...