EUVD-2006-0726

Malware in sbrugna...

EUVD-2019-7775

Malware in sbrugna...

EUVD-2018-10155

Malware in sbrugna...

CVE-2019-17368

S-CMS v1.5 has XSS in tpl.php via the member/memberlogin.php from parameter...

Code injection

S-CMS v1.5 has XSS in tpl.php via the member/memberlogin.php from parameter...

CVE-2019-17368

CVE-2019-17368 affects S-CMS v1.5 with a reflected/self-XSS in tpl.php via the parameter in member_login.php. The connected Red Hat/Redirection entries confirm the same description. The available sources do not provide exploitation status, affected versions beyond v1.5, or remediation details. Ro...

CVE-2019-17368: Improper Neutralization of Input During Web Page Generation

S-CMS v1.5 has XSS in tpl.php via the member/memberlogin.php from parameter...

CVE-2018-18427

s-cms 3.0 allows SQL Injection via the member/post.php 0id parameter or the POST data to member/memberlogin.php...

Sql injection

s-cms 3.0 allows SQL Injection via the member/post.php 0id parameter or the POST data to member/memberlogin.php...

CVE-2018-18427

CVE-2018-18427 affects s-cms 3.0. The vulnerability is a SQL injection in the web app, exploitable via the parameter 0_id in member/post.php or via POST data to member/member_login.php. The issue is triggered by unsafely handled input, enabling an attacker to manipulate SQL queries. The CVE entry...

CVE-2018-18427

s-cms 3.0 allows SQL Injection via the member/post.php 0id parameter or the POST data to member/memberlogin.php...

CVE-2018-18427: Improper Neutralization of Special Elements used in an SQL Command

s-cms 3.0 allows SQL Injection via the member/post.php 0id parameter or the POST data to member/memberlogin.php...

speednetdirect.com XSS vulnerability

Open Bug Bounty ID: OBB-655760 Description| Value ---|--- Affected Website:| speednetdirect.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lek333.com XSS vulnerability

Open Bug Bounty ID: OBB-598387 Description| Value ---|--- Affected Website:| lek333.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

moo222.com XSS vulnerability

Open Bug Bounty ID: OBB-481651 Description| Value ---|--- Affected Website:| moo222.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lotto222.com XSS vulnerability

Vulnerable URL: http://www.lotto222.com/Member/memberlogin.php?Msg=Business Analyst Details: Description| Value ---|--- Patched:| No Latest check for patch:| 12.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

sanbadasports.co.kr XSS vulnerability

Vulnerable URL: http://sanbadasports.co.kr/front/member/memberlogin.php?returnURL=http://sanbadasports.co.kr/front/support/faqlist.php"alert/OPENBUGBOUNTY/...

CVE-2006-0719

The provided data confirms a SQL injection vulnerability in PHP Classifieds, affecting versions 6.18–6.20. The flaw resides in member_login.php where the (1) username parameter (used for the E-mail address field) and (2) password parameter can be leveraged by remote attackers to execute arbitrary...

CVE-2006-0719: Undefined Security Weakness

SQL injection vulnerability in memberlogin.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute arbitrary SQL commands via the 1 username parameter, which is used by the E-mail address field, and 2 password parameter...