Lucene search
+L

103 matches found

SUSE CVE
SUSE CVE
•added 2026/05/21 2:45 a.m.•23 views

SUSE CVE-2024-43365

Cacti is an open source performance and fault management framework. Theconsolenewsection parameter is not properly sanitized when saving external links in links.php . Morever, the said consolenewsection parameter is stored in the database and reflected back to user in index.php, finally leading t...

8.2CVSS7.2AI score0.25068EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2005-1806

Malware in sbrugna...

7.5CVSS6.4AI score0.01083EPSS
SaveExploits2References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2008-6236

Malware in sbrugna...

7.5CVSS6.4AI score0.00961EPSS
SaveExploits2References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2008-0818

Malware in sbrugna...

7.5CVSS6.4AI score0.00999EPSS
SaveExploits1References4
NVD
NVD
•added 2024/10/07 9:15 p.m.•33 views

CVE-2024-43364

Cacti is an open source performance and fault management framework. The title parameter is not properly sanitized when saving external links in links.php . Morever, the said title parameter is stored in the database and reflected back to user in index.php, finally leading to stored XSS. Users wit...

8.2CVSS0.37876EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/07 12:00 a.m.•1 views

CVE-2024-43362: Improper Neutralization of Input During Web Page Generation

Cacti is an open source performance and fault management framework. The fileurl parameter is not properly sanitized when saving external links in links.php . Morever, the said fileurl is placed in some html code which is passed to the print function in link.php and index.php, finally leading to...

7.3CVSS6.9AI score0.38567EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/07 12:00 a.m.•2 views

CVE-2024-43364: Improper Neutralization of Input During Web Page Generation

Cacti is an open source performance and fault management framework. The title parameter is not properly sanitized when saving external links in links.php . Morever, the said title parameter is stored in the database and reflected back to user in index.php, finally leading to stored XSS. Users wit...

8.2CVSS7.3AI score0.37876EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/07 12:00 a.m.•1 views

CVE-2024-43365: Improper Neutralization of Input During Web Page Generation

Cacti is an open source performance and fault management framework. Theconsolenewsection parameter is not properly sanitized when saving external links in links.php . Morever, the said consolenewsection parameter is stored in the database and reflected back to user in index.php, finally leading t...

8.2CVSS7.3AI score0.25068EPSS
SaveExploits1References1
NVD
NVD
•added 2018/09/20 2:29 p.m.•61 views

CVE-2018-17254

The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter...

9.8CVSS9.9AI score0.82976EPSS
SaveExploits7References2
Cvelist
Cvelist
•added 2018/09/20 2:00 p.m.•58 views

CVE-2018-17254

The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter...

10AI score0.82976EPSS
SaveExploits7References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/20 12:00 a.m.•4 views

CVE-2018-17254: Improper Neutralization of Special Elements used in an SQL Command

The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter...

9.8CVSS8.2AI score0.82976EPSS
SaveExploits7References2
Openbugbounty
Openbugbounty
•added 2017/09/02 12:45 a.m.•19 views

katalog.bajery.pl XSS vulnerability

Vulnerable URL: https://katalog.bajery.pl/links.php?search=pas%22%27--!%3E%3Cscript%3EalertOPENBUGBOUNTY%3C/script%3E&szukaj.x;=0&szukaj.y;=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2015/11/24 7:13 p.m.•20 views

imagefap.com XSS vulnerability

Vulnerable URL: http://www.imagefap.com/links.php?bbcode=0=Deselect%20all=5812727=1'%22%26%25prompt/XSSPOSED/...

6.9AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•24 views

webSPELL <= 4.01.02 Multiple Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV3 print \n \'/ ; print \n -.- ; print \n -------------------oOO------OOo--------------------; print \n | webSPELL = v4.01.02 Multiple Remote SQL Injection |; print \n | coded by DNX |; print \n...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•27 views

Rianxosencabos CMS 0.9 - Remote Blind SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rianxosencabos CMS 0.9 Remote Blind SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- / Script: Rianxosencabos / Version: 0.9 / File affected:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•69 views

myPHPNuke 1.8.8 Links.php Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6892/info Reportedly, myPHPNuke 'links.php' does not adequately filter HTML code thus making it prone to cross-site scripting attacks. It is possible for a remote attacker to create a malicious link containing script code...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•32 views

Woltlab Burning Board <= 2.3.5 (links.php) SQL Injection Exploit

No description provided by source. !/usr/bin/perl use IO::Socket; print q Woltlab Burning Board 2.3.4 = links.php SQL Injection Exploit - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Exploit by | 666 SR-Crew Bug by | x82 Googledork | inurl:/wbb2/links.php?cat Usage | links.pl...

7.1AI score
SaveExploits0
Prion
Prion
•added 2013/08/25 3:27 a.m.•21 views

Sql injection

SQL injection vulnerability in links.php in MYRE Business Directory allows remote attackers to execute arbitrary SQL commands via the cat parameter...

7.5CVSS9.1AI score0.01019EPSS
SaveExploits2References1
CVE
CVE
•added 2013/08/25 1:00 a.m.•54 views

CVE-2012-6588

The vulnerability CVE-2012-6588 affects the MYRE Business Directory product, specifically the links.php component. The issue is a SQL injection in the cat parameter, allowing remote attackers to execute arbitrary SQL commands. The available documents do not specify affected versions, build detail...

7.5CVSS8.7AI score0.01019EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/08/25 12:00 a.m.•6 views

CVE-2012-6588: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in links.php in MYRE Business Directory allows remote attackers to execute arbitrary SQL commands via the cat parameter...

7.5CVSS6.4AI score0.01019EPSS
SaveExploits2References2
Rows per page
Query Builder