Lucene search
+L

80 matches found

Positive Technologies
Positive Technologies
added 2023/06/29 12:0 a.m.4 views

PT-2023-24962 · Unknown · Simplephpscripts Classified Ads Script

Name of the Vulnerable Software and Affected Versions: SimplePHPscripts Classified Ads Script version 1.8 Description: A vulnerability was found in the component URL Parameter Handler of the file /preview.php. The manipulation of the argument p leads to cross site scripting. It is possible to...

6.1CVSS6.6AI score0.00502EPSS
SaveExploits0References5
Prion
Prion
added 2023/05/29 9:15 p.m.21 views

Sql injection

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of the processlogin.php login form...

7.5CVSS9.9AI score0.26389EPSS
SaveExploits4References1Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 6:11 a.m.7 views

SUSE CVE-2007-4465

Cross-site scripting XSS vulnerability in modautoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that th...

6.1CVSS6AI score0.26188EPSS
SaveExploits0References7
NVD
NVD
added 2022/11/29 4:15 a.m.14 views

CVE-2022-42109

Online-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via the p parameter at /shopping/product.php...

9.8CVSS0.01122EPSS
SaveExploits0References3
OSV
OSV
added 2022/11/29 4:15 a.m.3 views

CVE-2022-42109

Online-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via the p parameter at /shopping/product.php...

9.8CVSS5.8AI score0.01122EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/11/29 12:0 a.m.23 views

CVE-2022-42109

Online-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via the p parameter at /shopping/product.php...

10AI score0.01122EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/11/29 12:0 a.m.3 views

PT-2022-26253 · Unknown · Online-Shopping-System-Advanced

Name of the Vulnerable Software and Affected Versions: Online-shopping-system-advanced version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the p parameter at the "/shopping/product.php" API endpoint. Recommendations: For...

9.8CVSS7.4AI score0.01122EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2022/03/29 6:15 p.m.4 views

CVE-2021-43109

An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php...

7.5CVSS7.2AI score0.01195EPSS
SaveExploits1References2
NVD
NVD
added 2020/02/05 9:15 p.m.14 views

CVE-2011-1009

Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter...

6.1CVSS6.1AI score0.00804EPSS
SaveExploits1References1
0day.today
0day.today
added 2019/03/27 12:0 a.m.39 views

XooDigital - (p) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: XooDigital - 'p' SQL Injection Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://xooscripts.com/product/digital-download-protection-script.html Demo Site: http://xooscripts.com/demos/xoodigital/ Version: Lastest Tested...

0.2AI score
SaveExploits0
OSV
OSV
added 2018/09/04 4:29 a.m.7 views

CVE-2018-16450

CraftedWeb through 2013-09-24 has reflected XSS via the p parameter...

6.1CVSS5.8AI score0.00675EPSS
SaveExploits1References1
Hacker One
Hacker One
added 2017/02/24 1:55 p.m.41 views

Ubiquiti Inc.: Reflected cross-site scripting (XSS) vulnerability in scores.ubnt.com allows attackers to inject arbitrary web script via p parameter.

Dear Ubiquiti Networks bug bounty team, Short Description --- scores.ubnt.com is still vulnerable to reflected XSS, a form of client-side code injection wherein one can execute malicious scripts into a page. The fix to https://hackerone.com/reports/158484 does not suffice for some browsers mainly...

0.2AI score
SaveExploits0
Prion
Prion
added 2015/01/27 8:4 p.m.19 views

Sql injection

SQL injection vulnerability in ferretCMS 1.0.4-alpha allows remote attackers to execute arbitrary SQL commands via the p parameter in an update action to admin.php...

7.5CVSS9.1AI score0.02358EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2014/05/22 3:13 p.m.10 views

CVE-2014-3846

Cross-site scripting XSS vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter to index.php...

4.3CVSS5.7AI score0.01427EPSS
SaveExploits1References2
Prion
Prion
added 2014/05/22 3:13 p.m.15 views

Cross site scripting

Cross-site scripting XSS vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter to index.php...

4.3CVSS6.2AI score0.01427EPSS
SaveExploits1References2
CVE
CVE
added 2013/10/02 10:0 p.m.78 views

CVE-2013-5979

The CVE-2013-5979 issue affects Spring Signage Xibo 1.2.x (pre-1.2.3) and 1.4.x (pre-1.4.2). A directory traversal flaw allows remote attackers to read arbitrary files by supplying a .. in the p parameter to index.php. Impact: potential exposure of sensitive server files. Root cause: insufficient...

5CVSS6.8AI score0.18267EPSS
SaveExploits2References2Affected Software1
Positive Technologies
Positive Technologies
added 2013/10/02 12:0 a.m.8 views

PT-2013-5900

Name of the Vulnerable Software and Affected Versions Spring Signage Xibo versions 1.2.x through 1.2.2 Spring Signage Xibo versions 1.4.x through 1.4.1 Description The issue allows remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the p parameter to the "index.ph...

5CVSS6.8AI score0.18267EPSS
SaveExploits2References5
0day.today
0day.today
added 2013/10/01 12:0 a.m.26 views

Wapkul Beta 3 SQL Injection Vulnerability

Exploit for php platform in category web applications / \ / | / \ /000000 | 00 | /000000 | 00 \00/ / \ / \ / \ 00 \ / / \ / \ 00 \00/ / \ / | 00 \ 000000 |/000000 |000000 |0000000 |000000 0000 | 000000 | 00 \ /000000 |/0000000/ 000000 | / 00 |00 | 00/ / 00 |00 | 00 |00 | 00 | 00 | / 00 | 000000...

7.1AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2011/11/01 10:55 p.m.1 views

CVE-2010-4987

SQL injection vulnerability in default.asp in KMSoft Guestbook aka GBook allows remote attackers to execute arbitrary SQL commands via the p parameter...

7.5CVSS6.4AI score0.01014EPSS
SaveExploits1References5
NVD
NVD
added 2011/07/08 10:55 p.m.15 views

CVE-2010-4808

SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter...

7.5CVSS8.4AI score0.0099EPSS
SaveExploits1References4
Rows per page
Query Builder