290 matches found
CVE-2015-10051: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displayallreplies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as...
Cross site scripting
EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /lilac/main.php...
CVE-2022-41434: Improper Neutralization of Input During Web Page Generation
EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /lilac/main.php...
CVE-2022-41434
CVE-2022-41434 affects EyesOfNetwork Web Interface version 5.3. The vulnerability is a reflected XSS in the /lilac/main.php endpoint. The CVSS vector from multiple sources indicates a NETWORK attack vector with no privileges required but user interaction needed, and impact on confidentiality/ int...
CVE-2022-41434
EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /lilac/main.php...
CVE-2022-34531
DedeCMS v5.7.95 was discovered to contain a remote code execution RCE vulnerability via the component mytag main.php...
CVE-2022-34531: Undefined Security Weakness
DedeCMS v5.7.95 was discovered to contain a remote code execution RCE vulnerability via the component mytag main.php...
Brandbugle SQL Injection Vulnerability
Brandbugle is an e-commerce application from Brandbugle India. Brandbugle is vulnerable to SQL injection, which can be exploited by attackers to cause sql injection issues via /main.php...
CVE-2020-36536
A vulnerability was found in Brandbugle. It has been rated as critical. Affected by this issue is some unknown functionality of the file /main.php. The manipulation leads to sql injection. The attack may be launched remotely...
Sql injection
A vulnerability was found in Brandbugle. It has been rated as critical. Affected by this issue is some unknown functionality of the file /main.php. The manipulation leads to sql injection. The attack may be launched remotely...
CVE-2020-36536 Brandbugle main.php sql injection
A vulnerability was found in Brandbugle. It has been rated as critical. Affected by this issue is some unknown functionality of the file /main.php. The manipulation leads to sql injection. The attack may be launched remotely...
CVE-2020-36536: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Brandbugle. It has been rated as critical. Affected by this issue is some unknown functionality of the file /main.php. The manipulation leads to sql injection. The attack may be launched remotely...
GHSA-5JXP-4X68-MHQC Centreon SQL Injection
Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.24 allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI...
GHSA-79HG-357G-RRGV Centreon SQL Injection
Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.28 allows SQL Injection via the main.php searchH parameter...
Centreon SQL Injection
Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.28 allows SQL Injection via the main.php searchH parameter...
Cross-site Scripting (XSS)
ptrofimov/beanstalkconsole is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in the output parameters in main.php and serversList.php, allowing an attacker to inject and execute malicious javascript...
CVE-2021-39315: Improper Neutralization of Input During Web Page Generation
The Magic Post Voice WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the ids parameter found in the /inc/admin/main.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.2...
PT-2021-7898
Name of the Vulnerable Software and Affected Versions DedeCMS version 7.5 SP2 Description The issue is related to multiple cross-site scripting XSS vulnerabilities in the media main.php component. These vulnerabilities can be exploited via the activepath, keyword, tag, fmdo=x&filename, CKEditor,...