CVE-2019-11567

An issue was discovered in AikCms v2.0. There is a SQL Injection vulnerability via $GET'del', as demonstrated by an admin/page/system/nav.php?del= URI...

CVE-2019-11568: Unrestricted Upload of File with Dangerous Type

An issue was discovered in AikCms v2.0. There is a File upload vulnerability, as demonstrated by an admin/page/system/nav.php request with PHP code in a .php file with the application/octet-stream content type...

CVE-2019-11567: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in AikCms v2.0. There is a SQL Injection vulnerability via $GET'del', as demonstrated by an admin/page/system/nav.php?del= URI...

DouCo DouPHP Cross-Site Scripting Vulnerability

DouCo DouPHP is a lightweight open source CMS Content Management System based on PHP and MySQL. A cross-site scripting vulnerability exists in admin/nav.php?rec=update in DouCo DouPHP version 1.5 20181221. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML wit...

CVE-2018-20565

An issue was discovered in DouCo DouPHP 1.5 20181221. admin/nav.php?rec=update has XSS via the navname parameter...

CVE-2018-20565: Improper Neutralization of Input During Web Page Generation

An issue was discovered in DouCo DouPHP 1.5 20181221. admin/nav.php?rec=update has XSS via the navname parameter...

PT-2018-15435

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP, where the "admin/nav.php?rec=update" endpoint has a cross-site scripting XSS issue via the nav name parameter. Recommendations For DouPHP version 1.5 20181221,...

kitamoto.net XSS vulnerability

Vulnerable URL: http://kitamoto.net/k-sci/nav.php?tno=1235"alert/OPENBUGBOUNTY/...

ciamt.org XSS vulnerability

Vulnerable URL: https://www.ciamt.org/nav.php?PAGE=liens"alert/OPENBUGBOUNTY/...

WebprojectDB <= 0.1.3 (INCDIR) Remote File Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ WebprojectDB INCDIR = v.0.1.3 Remote File Include Vulnerability $$ script site: http://sourceforge.net/projects/webprojectdb/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$...

Sql injection

Multiple SQL injection vulnerabilities in Jetbox CMS 2.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 orderby parameter to admin/cms/images.php and the 2 navid parameter in an editrecord action to admin/cms/nav.php...

CVE-2008-4651

CVE-2008-4651 affects Jetbox CMS 2.1 with multiple SQL injection vulnerabilities that allow remote authenticated users to execute arbitrary SQL commands. The issues are triggered via (1) the orderby parameter to admin/cms/images.php and (2) the nav_id parameter in an editrecord action to admin/cm...

CVE-2008-4651: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Jetbox CMS 2.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 orderby parameter to admin/cms/images.php and the 2 navid parameter in an editrecord action to admin/cms/nav.php...

Fully Modded phpBB <= 2021.4.40 Multiple File Include Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== Fully Modded phpBB = 2021.4.40 Multiple File Include Vulnerabilities ===================================================================== Fully Modded phpBB 2 Remote Fi...

CVE-2006-5108: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitrary web script or HTML via the orderid parameter in 1 admin/printorder.php and 2 vieworder.php; the 3 siteurl and 4 lasearchhome parameters and 5 certain language parameters in...

CVE-2006-2995: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in WebprojectDB 0.1.3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the INCDIR parameter in 1 include/nav.php and 2 include/lang.php...