256 matches found
CVE-2018-20557: Improper Neutralization of Input During Web Page Generation
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/page.php?rec=edit has XSS via the pagename parameter...
CVE-2018-17783: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in the Edit Filter page managefilteredit page.php in MantisBT 2.1.0 through 2.17.1 allows remote attackers if access rights permit it to inject arbitrary code if CSP settings permit it through a crafted project name...
CVE-2018-1000638
MiniCMS version 1.1 contains a Cross Site Scripting XSS vulnerability in http://example.org/mc-admin/page.php?date=payload that can result in code injection...
CVE-2018-1000638
MiniCMS version 1.1 contains a Cross Site Scripting XSS vulnerability in http://example.org/mc-admin/page.php?date=payload that can result in code injection...
CVE-2018-1000638: Improper Neutralization of Input During Web Page Generation
MiniCMS version 1.1 contains a Cross Site Scripting XSS vulnerability in http://example.org/mc-admin/page.php?date=payload that can result in code injection...
ninalieven.net XSS vulnerability
Open Bug Bounty ID: OBB-613651 Description| Value ---|--- Affected Website:| ninalieven.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
fertigreen.nl XSS vulnerability
Open Bug Bounty ID: OBB-605979 Description| Value ---|--- Affected Website:| fertigreen.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Sql injection
SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...
CVE-2018-6576
SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...
CVE-2018-6576
SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...
CVE-2018-6576: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...
CVE-2014-8492: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in assets/misc/fallback-page.php in the Profile Builder plugin before 2.0.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 sitename, 2 message, or 3 siteurl parameter...
CVE-2015-7517: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in the Double Opt-In for Download plugin before 2.0.9 for WordPress allow remote attackers to execute arbitrary SQL commands via the ver parameter to 1 class-doifd-download.php or 2 class-doifd-landing-page.php in public/includes/...
puntoeacapo.net XSS vulnerability
Vulnerable URL: http://www.puntoeacapo.net/page.php?url=alert'OPENBUGBOUNTY'...
vergelegen.co.za XSS vulnerability
Vulnerable URL: http://www.vergelegen.co.za/Alpha/Page.php?SearchString="--!"=xImageID=1140000000== Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2480466 VIP website status:| No...
CVE-2017-7386
citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php model parameter...
CVE-2017-7386
citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php model parameter...
CVE-2017-7386: Improper Neutralization of Input During Web Page Generation
citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php model parameter...
gasparin.cz XSS vulnerability
Vulnerable URL: http://gasparin.cz/page.php?page=co2/products/gmotors/gmotors"=en Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12960412 VIP website status:| No Check gasparin.cz...