CVE-2025-64047: Improper Neutralization of Input During Web Page Generation

OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting XSS in /user/user-move.php...

PT-2022-8595

Name of the Vulnerable Software and Affected Versions piwigo version 2.9.5 Description The issue is related to a SQL Injection vulnerability in the cat move.php file, specifically via the selection parameter to move categories. This allows for potential exploitation. Recommendations For piwigo...

Cross site scripting

Metinfo 6.1.3 has reflected XSS via the admin/column/move.php langcolumnerr4 parameter...

CVE-2018-19835

CVE-2018-19835 affects MetInfo 6.1.3, with a reflected XSS in the admin/column/move.php parameter lang_columnerr4. The root cause is unsanitized input in that parameter, enabling an attacker to inject arbitrary script/HTML. Documented impact is reflected XSS; CVSS data (NVD) shows MEDIUM overall,...

PT-2018-15119

Name of the Vulnerable Software and Affected Versions Metinfo version 6.1.3 Description The issue is related to reflected XSS. It can be exploited via the lang columnerr4 parameter in the "admin/column/move.php" endpoint. Recommendations For Metinfo version 6.1.3, consider restricting access to t...

CVE-2018-19835: Improper Neutralization of Input During Web Page Generation

Metinfo 6.1.3 has reflected XSS via the admin/column/move.php langcolumnerr4 parameter...

appjob.com XSS vulnerability

Vulnerable URL: http://www.appjob.com/move.php?page=index.php?"OPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10597929 VIP website status:| No Check appjob.com SSL...

CVE-2014-10004: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/datafiles/move.php in Maian Uploader 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2015-3648

Name of the Vulnerable Software and Affected Versions Maian Uploader version 4.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "admin/data files/move.php" endpoint. Recommendations For Maian Uploader version 4.0, avoi...

CVE-2012-4393

Multiple cross-site request forgery CSRF vulnerabilities in ownCloud before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users for requests that use 1 addBookmark.php, 2 delBookmark.php, or 3 editBookmark.php in bookmarks/ajax/; 4 calendar/delete.php, 5 calendar/edit.php...

Alsco CMS SQL Injection

x Tybe: SQL Injection Vulnerabilities x Vendor: http://www.alscosoftware.com/ x Script Name: ALSCO CMS x author: PrinceofHacking x Team: Ashiyane Digital Security Team x Mail : PrincedotH4ck@gmaildotcom D0rk: inurl:"move.php?" site:.iq Exploit: http://localhost/path/move/Showarchiv.php?id=-1...