985 matches found
callens-fg.be XSS vulnerability
Open Bug Bounty ID: OBB-284037 Description| Value ---|--- Affected Website:| callens-fg.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2017-9609
Cross-site scripting XSS vulnerability in Blackcat CMS 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the maplanguage parameter to backend/pages/langsettings.php...
Tiki Wiki CMS Groupware Cross-Site Scripting Vulnerability (CNVD-2017-16010)
Tiki Wiki CMS Groupware is a suite of open source content management and portal applications from the Tiki software community that can be used to create web applications, portals, corporate intranets, extranets, and more. A cross-site scripting vulnerability exists in the TikiFilter.php file in...
lang-ag.com XSS vulnerability
Vulnerable URL: https://www.lang-ag.com/en/suche.html?txindexedsearchsword=%22%3E%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3EindexedsearchfreeIndexUid=indexedsearchpointer=0 Details: Description| Value ---|--- Patched:| Yes, at 11.07.2017 Latest check for patch:| 11.07.2017 06:...
CVE-2017-9145
TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS...
Cross site scripting
TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS...
CVE-2017-9145
TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS...
CVE-2017-7886
Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...
Sql injection
Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...
CVE-2017-7886
Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...
CVE-2017-7886
Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...
CVE-2017-7886
Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...
PT-2017-17973 · Dolibarr · Dolibarr Erp/Crm
Name of the Vulnerable Software and Affected Versions: Dolibarr ERP/CRM version 4.0.4 Description: The issue is related to SQL Injection in the doli/theme/eldy/style.css.php file via the lang parameter. Recommendations: For version 4.0.4, avoid using the lang parameter in the affected file until...
PT-2017-3172 · NetGear · Netgear Wnr2000V5 Router
Name of the Vulnerable Software and Affected Versions: NETGEAR WNR2000v5 Router affected versions not specified Description: The issue is caused by a buffer overflow in the hidden lang avi parameter when invoking the URL "/apply.cgi?/lang check.html". This can be exploited by an unauthenticated...
Lua: Buffer overflow
Background Lua is a powerful, efficient, lightweight, embeddable scripting language. It supports procedural programming, object-oriented programming, functional programming, data-driven programming, and data description. Description A buffer overflow was discovered in the vararg functions in ldo....
XSS Cross-Site Scripting Vulnerability in Apabi Thesis Authorization Submission System of Beijing Founder Apabi Technology Co.
Apabi Thesis Authorization Submission System is a thesis submission system that can be used by college libraries to collect students' theses developed by Beijing Founder Apabi Technology Co. A cross-site scripting vulnerability exists in the Apabi Thesis Authorization Submission System of Beijing...
F3 designs Website SQL Injection Vulnerability
F3 designs is a custom website design and development framework. A SQL injection vulnerability exists in the lang parameter of the index.php page of F3 designs. Because the program fails to adequately filter user-submitted input, an attacker could use this vulnerability to compromise the...
CrossComm SQL Injection Vulnerability
CrossComm is a mobile and web application development studio. An SQL injection vulnerability exists in the lang parameter of CrossComm's index.php page, which can be used by an attacker to take control of the application, access or modify data, or exploit a potential vulnerability in the underlyi...
PHPSYSINFO Local File Disclosure Vulnerability
phpsysinfo is a php script tool software that supports php web server for detecting some information about the host. A local file disclosure vulnerability exists in the lang parameter of the language.php page in PHPSYSINFO version 3.1.12, which can be exploited by attackers to obtain sensitive...