CVE-2023-3853

A vulnerability was found in phpscriptpoint BloodBank 1.1. It has been rated as problematic. This issue affects some unknown processing of the file page.php. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-235205 was assigned to this...

Cross site scripting

A vulnerability was found in phpscriptpoint BloodBank 1.1. It has been rated as problematic. This issue affects some unknown processing of the file page.php. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-235205 was assigned to this...

CVE-2023-3853 phpscriptpoint BloodBank page.php cross site scripting

A vulnerability was found in phpscriptpoint BloodBank 1.1. It has been rated as problematic. This issue affects some unknown processing of the file page.php. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-235205 was assigned to this...

PT-2023-26500 · Unknown · Phpscriptpoint Bloodbank

Name of the Vulnerable Software and Affected Versions: phpscriptpoint BloodBank version 1.1 Description: A problem was found in the processing of the file page.php, which can lead to cross site scripting. The attack may be initiated remotely. The vendor was contacted about this issue but did not...

CVE-2023-3853: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in phpscriptpoint BloodBank 1.1. It has been rated as problematic. This issue affects some unknown processing of the file page.php. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-235205 was assigned to this...

CVE-2022-4633: Cross-Site Request Forgery (CSRF)

A vulnerability was found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file src/setting-page.php of the component Settings Handler. The manipulation leads to cross-site request forgery. The attack may be launched...

CVE-2022-4633 Auto Upload Images Settings setting-page.php cross-site request forgery

A vulnerability was found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file src/setting-page.php of the component Settings Handler. The manipulation leads to cross-site request forgery. The attack may be launched...

CVE-2022-43321

Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting XSS vulnerability in the component /common/library/Page.php...

CVE-2022-43321

Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting XSS vulnerability in the component /common/library/Page.php...

CVE-2022-43321

Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting XSS vulnerability in the component /common/library/Page.php...

ShopWind 跨站脚本漏洞

ShopWind is a Chinese ShopWind company based on the Yii2.0 framework of the depth of the reconstruction of the B2B2C, O2O industry e-commerce system software. A cross-site scripting vulnerability exists in ShopWind v3.4.3, which stems from the lack of effective filtering and escaping of...

PT-2022-26847 · Shopwind · Shopwind

Name of the Vulnerable Software and Affected Versions: Shopwind version 3.4.3 Description: The issue is related to a reflected cross-site scripting XSS vulnerability. This vulnerability was found in the /common/library/Page.php component. Recommendations: For Shopwind version 3.4.3, consider...

CVE-2022-43321

Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting XSS vulnerability in the component /common/library/Page.php...

CVE-2022-43321: Improper Neutralization of Input During Web Page Generation

Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting XSS vulnerability in the component /common/library/Page.php...

CVE-2022-43321

Shopwind v3.4.3 has a reflected cross-site scripting (XSS) vulnerability in /common/library/Page.php. Root cause: lack of proper input filtering/escaping. CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (base 6.1, MEDIUM). Impact is limited to confidentiality and integrity (LOW) with user ...

CVE-2022-27412

Explore CMS v1.0 was discovered to contain a SQL injection vulnerability via a /page.php?id= request...

Sql injection

Explore CMS v1.0 was discovered to contain a SQL injection vulnerability via a /page.php?id= request...

CVE-2022-27412

Explore CMS v1.0 was discovered to contain a SQL injection vulnerability via a /page.php?id= request...

CVE-2022-27412: Improper Neutralization of Special Elements used in an SQL Command

Explore CMS v1.0 was discovered to contain a SQL injection vulnerability via a /page.php?id= request...

CVE-2022-0653: Improper Neutralization of Input During Web Page Generation

The Profile Builder – User Profile & User Registration Forms WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the siteurl parameter found in the /assets/misc/fallback-page.php file which allows attackers to inject arbitrary web scripts onto a...