Design/Logic Flaw

vBSeo before 3.6.0PL2 allows XSS via the member.php u parameter...

CVE-2012-6666

CVE-2012-6666 affects vBSeo prior to 3.6.0PL2. The issue is a reflected XSS vulnerability exploitable via the member.php u parameter. The provided documents do not specify affected platforms beyond the product/version and do not include exploit code or remediation details. No additional impact or...

CVE-2012-6666

vBSeo before 3.6.0PL2 allows XSS via the member.php u parameter...

CVE-2012-6666: Improper Neutralization of Input During Web Page Generation

vBSeo before 3.6.0PL2 allows XSS via the member.php u parameter...

Design/Logic Flaw

SeaCMS 7.2 mishandles member.php?mod=repsw4 requests...

CVE-2019-8418

SeaCMS 7.2 mishandles member.php?mod=repsw4 requests...

CVE-2019-8418

CVE-2019-8418 affects SeaCMS 7.2 and is triggered by mishandling requests to member.php?mod=repsw4. The NVD record lists CVSS v3 as 8.8 (HIGH) with network attack, low complexity, and privileges required as LOW; impacts are HIGH for confidentiality, integrity, and availability. The description al...

CVE-2019-8418

SeaCMS 7.2 mishandles member.php?mod=repsw4 requests...

CVE-2019-8418: Undefined Security Weakness

SeaCMS 7.2 mishandles member.php?mod=repsw4 requests...

CVE-2018-19350

In SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter during a password change, as demonstrated by a data: URL in an OBJECT element...

Cross site scripting

In SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter during a password change, as demonstrated by a data: URL in an OBJECT element...

CVE-2018-19350

SeaCMS v6.6.4 is vulnerable to a stored XSS via the email parameter in member.php?action=chgpwdsubmit during password changes. The issue is demonstrated by a data: URL inside an OBJECT element. Confirmed by multiple sources (NVD entry CVE-2018-19350 and CNVD/CVEs referencing SeaCMS 6.6.4). The vu...

CVE-2018-19350: Improper Neutralization of Input During Web Page Generation

In SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter during a password change, as demonstrated by a data: URL in an OBJECT element...

PT-2018-14935

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.6.4 Description The issue concerns a stored XSS that can be triggered via the member.php?action=chgpwdsubmit endpoint, specifically through the email parameter during a password change process. This can be exploited by using a...

Design/Logic Flaw

PHPMyWind 5.5 has XSS in member.php via an HTTP Referer header,...

CVE-2018-17130

PHPMyWind 5.5 has XSS in member.php via an HTTP Referer header,...

CVE-2018-17130: Improper Neutralization of Input During Web Page Generation

PHPMyWind 5.5 has XSS in member.php via an HTTP Referer header,...

CVE-2018-14570: Unrestricted Upload of File with Dangerous Type

A file upload vulnerability in application/shop/controller/member.php in Niushop B2B2C Multi-business basic version V1.11 allows any remote member to upload a .php file to the web server via a profile avatar field, by using an image Content-Type e.g., image/jpeg with a modified filename and file...

radiodauerbrenner.at XSS vulnerability

Open Bug Bounty ID: OBB-627788 Description| Value ---|--- Affected Website:| radiodauerbrenner.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

radio-srw.de XSS vulnerability

Open Bug Bounty ID: OBB-596426 Description| Value ---|--- Affected Website:| radio-srw.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...