EUVD-2017-6035

Malware in sbrugna...

movietimecars.com XSS vulnerability

Open Bug Bounty ID: OBB-609389 Description| Value ---|--- Affected Website:| movietimecars.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross site scripting

Cross Site Scripting XSS exists in NexusPHP 1.5.beta5.20120707 via the PATHINFO to location.php, related to PHPSELF...

CVE-2017-14534

Cross Site Scripting XSS exists in NexusPHP 1.5.beta5.20120707 via the PATHINFO to location.php, related to PHPSELF...

CVE-2017-14534: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS exists in NexusPHP 1.5.beta5.20120707 via the PATHINFO to location.php, related to PHPSELF...

PT-2017-13512

Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5.beta5.20120707 Description A Cross Site Scripting XSS issue exists, related to the PATH INFO to the "location.php" endpoint, and is connected to the PHP SELF variable. Recommendations For NexusPHP version 1.5.beta5.2012070...

pokolokochildcare.com XSS vulnerability

Vulnerable URL: http://www.pokolokochildcare.com/location.php?setlocation=1/-///'/"//--...

PT-2013-5882

Name of the Vulnerable Software and Affected Versions CiviCRM versions prior to 4.2.12 CiviCRM versions 4.3.x prior to 4.3.7 CiviCRM versions 4.4.x prior to 4.4.beta4 Description The issue allows remote attackers to execute arbitrary SQL commands via the value parameter to 1 "ajax/jqState" or 2...

CVE-2013-5957: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in CRM/Core/Page/AJAX/Location.php in CiviCRM before 4.2.12, 4.3.x before 4.3.7, and 4.4.x before 4.4.beta4 allow remote attackers to execute arbitrary SQL commands via the value parameter to 1 ajax/jqState or 2 ajax/jqcounty...

Sql injection

SQL injection vulnerability in location.php in the eCal module in E-Xoopport Samsara 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the lid parameter...

CVE-2010-4942

The CVE-2010-4942 entry describes an SQL injection in the eCal module’s location.php for E-Xoopport Samsara 3.1 and earlier, exploitable via the lid parameter. Affected component: location.php in the eCal module of Samsara 3.1 and older. Root cause: unsafely constructed SQL commands through lid, ...

PT-2011-1877

Name of the Vulnerable Software and Affected Versions eCal module in E-Xoopport Samsara versions 3.1 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the lid parameter in the location.php file. Recommendations For versions 3.1 and...

CVE-2010-4942: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in location.php in the eCal module in E-Xoopport Samsara 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the lid parameter...