CVE-2018-19271

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.28 allows SQL Injection via the main.php searchH parameter...

Sql injection

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.28 allows SQL Injection via the main.php searchH parameter...

CVE-2018-19271

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.28 allows SQL Injection via the main.php searchH parameter...

PT-2018-14896

Name of the Vulnerable Software and Affected Versions Centreon versions 3.4.x Description The issue allows SQL Injection via the searchH parameter in the main.php file. Recommendations For Centreon versions 3.4.x, update to Centreon 18.10.0 or Centreon web 2.8.28 to resolve the issue...

CVE-2018-19271: Improper Neutralization of Special Elements used in an SQL Command

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.28 allows SQL Injection via the main.php searchH parameter...

The Open ISES Project 3.30A - tick_lat SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: The Open ISES Project 3.30A - 'ticklat' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://openises.sourceforge.net/ Software Link: https://sourceforge.net/projects/openises/files/latest/download Version:...

humum.net XSS vulnerability

Open Bug Bounty ID: OBB-661493 Description| Value ---|--- Affected Website:| humum.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kowollik.net XSS vulnerability

Open Bug Bounty ID: OBB-661164 Description| Value ---|--- Affected Website:| kowollik.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sbestway.com XSS vulnerability

Open Bug Bounty ID: OBB-641177 Description| Value ---|--- Affected Website:| sbestway.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Code injection

DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the egroup parameter to uploads/dede/stepselectmain.php because code within the database is accessible to uploads/dede/syscacheup.php...

CVE-2018-6022: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in application/admin/controller/Main.php in NoneCms through 1.3.0 allows remote authenticated users to delete arbitrary files by leveraging back-office access to provide a ..\ in the param.path parameter...

CVE-2012-6671: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in actions/main.php in the DragonByte Technologies Forumon RPG module before 1.0.8 for vBulletin when creating a new monster, allow remote attackers to inject arbitrary web script or HTML via the 1 monstertitle or 2 monsterdescription parameters...

fodesco.fi XSS vulnerability

Vulnerable URL: https://www.fodesco.fi/main.php?sub=shop"'--!alert/Y4R4G/...

soprassub.com XSS vulnerability

Vulnerable URL: http://soprassub.com/new/main.php?pg=03⊂cat=x"'--!alert/Y4R4G/...

CVE-2017-0378

XSS exists in the loginform function in views/helpers.php in Phamm before 0.6.7, exploitable via the PATHINFO to main.php...

Cross site scripting

XSS exists in the loginform function in views/helpers.php in Phamm before 0.6.7, exploitable via the PATHINFO to main.php...

CVE-2017-0378

XSS exists in the loginform function in views/helpers.php in Phamm before 0.6.7, exploitable via the PATHINFO to main.php...

CVE-2017-0378

Removed by vendor...

leesandwiches.com XSS vulnerability

Vulnerable URL: http://www.leesandwiches.com/main.php?act=productlist=1/-///'/"//--...

WordPress Plugin WA Form Builder SQL Injection

Description: Type user access: any user. $POST ‘waformsId’ is not escaped. WAFormBuilderuioutput is accessible for any user. File / Code: Path: /wp-content/plugins/wa-form-builder/main.php global $wpdb; echo 'SELECT FROM '.$wpdb-prefix.'wapwaformbuilder WHERE Id = '.$REQUEST'waformsId'; $formattr...