Cross-site Scripting (XSS)

pimcore/pimcore is vulnerable to Cross-site Scripting XSS. The vulnerability is due to not sanitizing/escaping the values present in the attributes field of Link.php component . The attacker can inject the malicious payload javascript inside attributes field leading to XSS when same page is...

CVE-2020-21321: Cross-Site Request Forgery (CSRF)

emlog v6.0 contains a Cross-Site Request Forgery CSRF via /admin/link.php?action=addlink, which allows attackers to arbitrarily add articles...

tekno.Portal 0.1b Cross Site Scripting

===================================================================== tekno.Portal v0.1b - Cross-Site Scripting Vulnerability in "link.php" ===================================================================== Exploit Title: tekno.Portal v0.1b - Cross-Site Scripting Vulnerability in "link.php"...

hellinglychurch.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-451889 Description| Value ---|--- Affected Website:| hellinglychurch.org.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

langly.cc Open Redirect vulnerability

Vulnerable URL: http://www.langly.cc/link.php?url=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| N...

FreeBSD : Cacti -- XSS (XSS) vulnerability in link.php (dc3c66e8-6a18-11e7-93af-005056925db4)

kimiizhang reports : Cross-site scripting XSS vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Cacti 'link.php' Cross-Site Scripting Vulnerability

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool through snmpget to get the data , using RRDtool drawing graphs to analyze , and provide data and user management features . A cross-site scripting vulnerability exists in the link.php file in...

CVE-2017-10970: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the diehtmlinputerror function in lib/htmlvalidate.php...

Cacti -- Cross-site scripting (XSS) vulnerability in link.php

kimiizhang reports: Cross-site scripting XSS vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter...

moviesmobile.net vulnerability

Vulnerable URL: http://moviesmobile.net/common/link.php?link=http://xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 47023 Google Pagerank| 2 VIP website status:| Yes Check moviesmobile.net SSL...

fewiki.jp vulnerability

Vulnerable URL: http://fewiki.jp/link.php?http://xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 320277 Google Pagerank| 2 VIP website status:| No Check fewiki.jp SSL connection:| Grade: F...

api.yuntj.com vulnerability

Vulnerable URL: http://api.yuntj.com/link.php?url=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 14.03.2016 Latest check for patch:| 14.03.2016 06:03 GMT Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 2 VIP website...

easethink 1.4 /link.php SQL注入漏洞

No description provided by source...

易 想 购物 link.php sql injection vulnerability-vulnerability warning-the black bar safety net

Easy to want to buy the system link. php within the page code if$REQUEST'act'=='go' //link tag go $url = $REQUEST'url'; //directly fetch the url VALUE into the sql query statement. $linkitem = $GLOBALS'db'-getRowCached"select from ". DBPREFIX."link where url = '".$ url."' or url = 'http://".$...

Sql injection

SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attackers to execute arbitrary SQL commands via the ids parameter in a link action...

CVE-2012-4990

CVE-2012-4990 : OpenX 2.8.10 (and earlier) is vulnerable to SQL injection via the ids[] parameter in admin/campaign-zone-link.php. The vulnerability allows remote attackers to manipulate SQL queries, with PoCs showing crafted ids[] input and an exploit requiring the attacker to be registered with...

CVE-2012-4990: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attackers to execute arbitrary SQL commands via the ids parameter in a link action...

Tekno.Portal v0.1b 'link.php' Blind SQL Injection Vulnerability

====================================================== Tekno.Portal v0.1b - Blind SQL Injection in "link.php" ====================================================== Exploit Title: Tekno.Portal v0.1b 'link.php' Blind SQL Injection Vulnerability Date: 08-01-2012 Author: Socket0x03 Alvaro J. Gene...

Tekno.Portal 0.1b Blind SQL Injection

====================================================== Tekno.Portal v0.1b - Blind SQL Injection in "link.php" ====================================================== Exploit Title: Tekno.Portal v0.1b 'link.php' Blind SQL Injection Vulnerability Date: 08-01-2012 Author: Socket0x03 Alvaro J. Gene...

tekno.Portal 0.1b - 'link.php' SQL Injection

source: https://www.securityfocus.com/bid/54786/info tekno.Portal is prone to an SQL-injection vulnerability. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. tekno.Portal 0.1b is...