Lucene search
K

9 matches found

OSV
OSV
added 2019/04/27 2:29 p.m.1 views

CVE-2019-11567

An issue was discovered in AikCms v2.0. There is a SQL Injection vulnerability via $GET'del', as demonstrated by an admin/page/system/nav.php?del= URI...

7.2CVSS7.1AI score
Exploits0References1
CNVD
CNVD
added 2018/12/29 12:0 a.m.1 views

DouCo DouPHP Cross-Site Scripting Vulnerability

DouCo DouPHP is a lightweight open source CMS Content Management System based on PHP and MySQL. A cross-site scripting vulnerability exists in admin/nav.php?rec=update in DouCo DouPHP version 1.5 20181221. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML wit...

4.8CVSS6AI score0.00235EPSS
Exploits1References1
NVD
NVD
added 2018/12/28 4:29 p.m.12 views

CVE-2018-20565

An issue was discovered in DouCo DouPHP 1.5 20181221. admin/nav.php?rec=update has XSS via the navname parameter...

4.8CVSS4.9AI score0.00235EPSS
Exploits1References1
Openbugbounty
Openbugbounty
added 2017/03/21 8:4 a.m.7 views

kitamoto.net XSS vulnerability

Vulnerable URL: http://kitamoto.net/k-sci/nav.php?tno=1235"alert/OPENBUGBOUNTY/...

6.9AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/03/19 5:28 p.m.9 views

ciamt.org XSS vulnerability

Vulnerable URL: https://www.ciamt.org/nav.php?PAGE=liens"alert/OPENBUGBOUNTY/...

6.9AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.20 views

WebprojectDB <= 0.1.3 (INCDIR) Remote File Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ WebprojectDB INCDIR = v.0.1.3 Remote File Include Vulnerability $$ script site: http://sourceforge.net/projects/webprojectdb/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$...

7.1AI score
Exploits0
Prion
Prion
added 2008/10/22 12:11 a.m.17 views

Sql injection

Multiple SQL injection vulnerabilities in Jetbox CMS 2.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 orderby parameter to admin/cms/images.php and the 2 navid parameter in an editrecord action to admin/cms/nav.php...

6CVSS8.8AI score0.00169EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2008/10/21 10:0 p.m.50 views

CVE-2008-4651

CVE-2008-4651 affects Jetbox CMS 2.1 with multiple SQL injection vulnerabilities that allow remote authenticated users to execute arbitrary SQL commands. The issues are triggered via (1) the orderby parameter to admin/cms/images.php and (2) the nav_id parameter in an editrecord action to admin/cm...

6CVSS8.1AI score0.00169EPSS
Exploits1References3Affected Software1
0day.today
0day.today
added 2006/10/23 12:0 a.m.39 views

Fully Modded phpBB <= 2021.4.40 Multiple File Include Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== Fully Modded phpBB = 2021.4.40 Multiple File Include Vulnerabilities ===================================================================== Fully Modded phpBB 2 Remote Fi...

7.1AI score
Exploits0
Rows per page
Query Builder