EUVD-2016-2004

Malware in sbrugna...

CVE-2025-2891: Unrestricted Upload of File with Dangerous Type

The Real Estate 7 WordPress theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'template-submit-listing.php' file in all versions up to, and including, 3.5.4. This makes it possible for authenticated attackers, with Seller-level access and abov...

CVE-2023-35860: Improper Limitation of a Pathname to a Restricted Directory

A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attacker to enumerate file system information via the dir parameter to listing.php or rss.php...

CVE-2016-11013

The wp-listings plugin before 2.0.2 for WordPress has includes/views/single-listing.php XSS...

PT-2019-7806

Name of the Vulnerable Software and Affected Versions wp-listings plugin versions prior to 2.0.2 Description The issue is related to an XSS problem in the includes/views/single-listing.php file of the wp-listings plugin for WordPress. Recommendations For versions prior to 2.0.2, update to version...

CVE-2016-11013: Improper Neutralization of Input During Web Page Generation

The wp-listings plugin before 2.0.2 for WordPress has includes/views/single-listing.php XSS...

made-in-provence.fr XSS vulnerability

Open Bug Bounty ID: OBB-554142 Description| Value ---|--- Affected Website:| made-in-provence.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

aquariumconnection.com XSS vulnerability

Open Bug Bounty ID: OBB-501328 Description| Value ---|--- Affected Website:| aquariumconnection.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

CVE-2017-15867: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the user-login-history plugin through 1.5.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 datefrom, 2 dateto, 3 userid, 4 username, 5 countryname, 6 browser, 7 operatingsystem, or 8 ipaddress parameter to...

PT-2017-14248

Name of the Vulnerable Software and Affected Versions user-login-history plugin for WordPress versions through 1.5.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via several parameters to the "admin/partials/listing/listing.php" endpoint, including date fro...

heraldgoa.in XSS vulnerability

Vulnerable URL: https://www.heraldgoa.in/listing.php?isajax=1id=6id=0%22%3E%3Ch1%3EM0ns7er%3C/h1%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/br%3E=13=5 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.09.2017 Vulnerability type:| XSS Vulnerability status:|...

ThisIsWhyImBroke Clone Script 4.0 - id SQL Injection

ThisIsWhyImBroke Clone Script 4.0 - id SQL Injection Exploit Title: Flippy AffilatePlatform – ThisIsWhyImBroke Clone Script v4.0 - SQL Injection Google Dork: N/A Date: 06.02.2017 Vendor Homepage: https://www.flippyscripts.com/ Software Buy:...

ThisIsWhyImBroke Clone Script 4.0.0 - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Flippy AffilatePlatform – ThisIsWhyImBroke Clone Script v4.0.0 - SQL Injection Google Dork: N/A Date: 06.02.2017 Vendor Homepage: https://www.flippyscripts.com/ Software Buy:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in 1 revision.php, 2 log.php, 3 listing.php, and 4 comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a a file or b directory in a repository...

CVE-2016-1236

Multiple cross-site scripting XSS vulnerabilities in 1 revision.php, 2 log.php, 3 listing.php, and 4 comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a a file or b directory in a repository...

CVE-2016-1236: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in 1 revision.php, 2 log.php, 3 listing.php, and 4 comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a a file or b directory in a repository...

PT-2016-4661

Name of the Vulnerable Software and Affected Versions WebSVN affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in various PHP files, including revision.php, log.php, listing.php, and comp.php. These vulnerabilities allow...

aWebNews 1.1 listing.php path_to_news Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/22781/info aWebNews is prone to multiple remote file-include vulnerabilities. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the...

CVE-2010-4504

Multiple cross-site scripting XSS vulnerabilities in eSyndiCat Directory 2.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter to 1 suggest-category.php and 2 suggest-listing.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in eSyndiCat Directory 2.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter to 1 suggest-category.php and 2 suggest-listing.php...