Lucene search
K

6 matches found

Positive Technologies
Positive Technologies
added 2025/07/14 12:0 a.m.2 views

PT-2025-29497 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SemCms version 5.0 Description: SemCms version 5.0 contains a SQL injection issue via the lgid parameter at the SEMCMS Link.php file. Recommendations: As a temporary workaround, consider restricting access to the SEMCMS Link.php file to...

5.4CVSS7.3AI score0.00254EPSS
Exploits1References7
BDU FSTEC
BDU FSTEC
added 2024/05/07 12:0 a.m.4 views

The vulnerability of the link.php script in the Cacti network monitoring software allows a hacker to execute arbitrary code.

The vulnerability of the link.php script in the Cacti network monitoring software is related to improper handling of file names for PHP functions like include or require. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

9CVSS8AI score0.63774EPSS
Exploits4References7Affected Software3
Veracode
Veracode
added 2023/08/02 6:15 a.m.16 views

Stored Cross-site Scripting (XSS)

phpmyfaq is vulnerable to Cross-site Scripting. The vulnerability exists due to a lack of validation in the user input of Link.php, which allows an attacker to inject and execute malicious Javascript into the browser...

5.4CVSS6.9AI score0.00426EPSS
Exploits0References3Affected Software2
CNVD
CNVD
added 2017/07/07 12:0 a.m.3 views

Cacti 'link.php' Cross-Site Scripting Vulnerability

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool through snmpget to get the data , using RRDtool drawing graphs to analyze , and provide data and user management features . A cross-site scripting vulnerability exists in the link.php file in...

5.4CVSS5.3AI score0.00637EPSS
Exploits0References1
Openbugbounty
Openbugbounty
added 2015/12/20 12:42 p.m.9 views

api.yuntj.com vulnerability

Vulnerable URL: http://api.yuntj.com/link.php?url=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 14.03.2016 Latest check for patch:| 14.03.2016 06:03 GMT Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 2 VIP website...

6.9AI score
Exploits0
Packet Storm
Packet Storm
added 2012/08/01 12:0 a.m.27 views

Tekno.Portal 0.1b Blind SQL Injection

====================================================== Tekno.Portal v0.1b - Blind SQL Injection in "link.php" ====================================================== Exploit Title: Tekno.Portal v0.1b 'link.php' Blind SQL Injection Vulnerability Date: 08-01-2012 Author: Socket0x03 Alvaro J. Gene...

7.4AI score
Exploits0
Rows per page
Query Builder