CVE-2017-9145

TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS...

CVE-2017-7886

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...

Sql injection

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...

CVE-2017-7886

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...

CVE-2017-7886

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...

CVE-2017-7886

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...

PT-2017-17973 · Dolibarr · Dolibarr Erp/Crm

Name of the Vulnerable Software and Affected Versions: Dolibarr ERP/CRM version 4.0.4 Description: The issue is related to SQL Injection in the doli/theme/eldy/style.css.php file via the lang parameter. Recommendations: For version 4.0.4, avoid using the lang parameter in the affected file until...

PT-2017-3172 · NetGear · Netgear Wnr2000V5 Router

Name of the Vulnerable Software and Affected Versions: NETGEAR WNR2000v5 Router affected versions not specified Description: The issue is caused by a buffer overflow in the hidden lang avi parameter when invoking the URL "/apply.cgi?/lang check.html". This can be exploited by an unauthenticated...

Lua: Buffer overflow

Background Lua is a powerful, efficient, lightweight, embeddable scripting language. It supports procedural programming, object-oriented programming, functional programming, data-driven programming, and data description. Description A buffer overflow was discovered in the vararg functions in ldo....

XSS Cross-Site Scripting Vulnerability in Apabi Thesis Authorization Submission System of Beijing Founder Apabi Technology Co.

Apabi Thesis Authorization Submission System is a thesis submission system that can be used by college libraries to collect students' theses developed by Beijing Founder Apabi Technology Co. A cross-site scripting vulnerability exists in the Apabi Thesis Authorization Submission System of Beijing...

F3 designs Website SQL Injection Vulnerability

F3 designs is a custom website design and development framework. A SQL injection vulnerability exists in the lang parameter of the index.php page of F3 designs. Because the program fails to adequately filter user-submitted input, an attacker could use this vulnerability to compromise the...

CrossComm SQL Injection Vulnerability

CrossComm is a mobile and web application development studio. An SQL injection vulnerability exists in the lang parameter of CrossComm's index.php page, which can be used by an attacker to take control of the application, access or modify data, or exploit a potential vulnerability in the underlyi...

PHPSYSINFO Local File Disclosure Vulnerability

phpsysinfo is a php script tool software that supports php web server for detecting some information about the host. A local file disclosure vulnerability exists in the lang parameter of the language.php page in PHPSYSINFO version 3.1.12, which can be exploited by attackers to obtain sensitive...

oslo.geodata.es XSS vulnerability

Vulnerable URL: http://oslo.geodata.es/elpraturb/urbanisme.php?lang=es";...

microring.am XSS vulnerability

Vulnerable URL: http://www.microring.am/index.php?lang=arm" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10196302 VIP website status:| No Check microring.am SSL connection:| Grad...

Multi Gigabit Packet Capturing: PFQ

PFQ is a functional networking framework designed for the Linux operating system that allows efficient packets capture/transmission 10G and beyond, in-kernel functional processing and packets steering across sockets/end-points. PFQ is highly optimized for multi-core architecture, as well as for...

DM enterprise built Station system \indexDM_load.php variable lang SQL injection

No description provided by source...

pp-telascica.hr XSS vulnerability

Vulnerable URL: http://pp-telascica.hr/index.php?lang=en'"/alert/openbugbounty/...

Litesploit - Library and Intepreter for Penetration Testing Tools

Litesploit is a library and intepreter for penetration testing tools. This includes exploits, tools and litepreter. Litesploit support for Linux like ubuntu or debian, and more distro penetration testing like BackBox and Kali Linux. Platform | Support ---|--- Linux Ubuntu | Yes Linux Debian | Yes...

WordPress Kento Post View Counter 2.8 Plugin - Cross-Site Request Forgery / Cross-Site Scripting

Exploit for php platform in category web applications I would like to disclose CSRF and stored XSS vulnerability in Kento post view counter plugin version 2.8 . The vulnerable Fields for XSS are kentopvcnumberslang kentopvctodaytext kentopvctotaltext The combination of CSRF and XSS in this plugin...