13 matches found
EUVD-2025-144731
Malicious code in apasih-ledang-manas npm...
EUVD-2017-4375
Malware in sbrugna...
Malicious code in test-mlw2-deans-manas (npm)
The package test-mlw2-deans-manas was found to contain malicious code...
MAL-2025-35185 Malicious code in test-mlw2-deans-manas (npm)
The package test-mlw2-deans-manas was found to contain malicious code...
WordPress Ninja Pages plugin <= 1.4.2 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability
Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Manas Talekar in WordPress Plugin Ninja Pages versions = 1.4.2...
obecnetrebice.cz Cross Site Scripting vulnerability OBB-3828335
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
xzhzsy.com Cross Site Scripting vulnerability OBB-3828330
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2017-12838
Cross-site request forgery CSRF vulnerability in NexusPHP 1.5 allows remote attackers to hijack the authentication of users for requests that 1 send manas via a request to mybonus.php or 2 add administrators via unspecified vectors...
CVE-2006-1155
Cross-site scripting XSS vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to inject arbitrary web script or HTML via the Error parameter in 1 login.asp and 2 default.asp...
Cross site scripting
Cross-site scripting XSS vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to inject arbitrary web script or HTML via the Error parameter in 1 login.asp and 2 default.asp...
CVE-2006-1156
The CVE-2006-1156 entry concerns the Manas Tungare Site Membership Script (pre-8 March 2006) with a SQL injection vulnerability. The Username parameter in login.asp is exploitable to run arbitrary SQL commands, allowing remote attackers to impact the backend database. The connected documents prov...
CVE-2006-1155
Cross-site scripting XSS vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to inject arbitrary web script or HTML via the Error parameter in 1 login.asp and 2 default.asp...
CVE-2006-1155
CVE-2006-1155 affects the Manas Tungare Site Membership Script. The vulnerability is a stored-reflected cross-site scripting (XSS) in the Error parameter of login.asp and default.asp, reported as exploitable before 8 March 2006. The connected documents provide the basic description and CVSS-like ...