CVE-2025-13409: Improper Neutralization of Special Elements used in an SQL Command

The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to SQL Injection via the 'params' parameter in all versions up to, and including, 1.4.13 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

CVE-2024-45262

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The params parameter in the call method of the /rpc endpoint is vulnerable to arbitrary directory traversal, which enables attackers to execute scripts under any path...

CVE-2024-25283

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2024-25282

The 3DSecure 2.0 product, specifically the 3DS Method Authentication component, is vulnerable to Cross-Site Scripting (XSS) . The root cause is the improper sanitization or validation of the base64-encoded params parameter during a /rest/online request containing a /redirect?action=challenge&txn=...

CVE-2024-25282

3DSecure 2.0 allows XSS in its 3DSMethod Authentication via a modified params parameter in a /rest/online request with a /redirect?action=challenge&txn= substring...

Cross site scripting

AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter...

CVE-2019-9595: Improper Neutralization of Input During Web Page Generation

AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter...

CVE-2017-14182: Improper Input Validation

A Denial of Service DoS vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 allows an authenticated user to cause the web GUI to be temporarily unresponsive, via passing a specially crafted payload to the 'params' parameter of the JSON web API...

PT-2017-3084

Name of the Vulnerable Software and Affected Versions FortiOS versions 5.4.0 through 5.4.5 Description The issue is caused by insufficient input validation in the FortiOS operating system. An attacker can exploit this by sending a specially crafted string to the params parameter of the JSON web...

CVE-2014-0359

Xangati XSR before 11 and XNR before 7 allows remote attackers to execute arbitrary commands via shell metacharacters in a guiinputtest.pl params parameter to servlet/Installer...

CVE-2008-3082

Cross-site scripting XSS vulnerability in UPM/English/login/login.asp in Commtouch Enterprise Anti-Spam Gateway 4 and 5 allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in UPM/English/login/login.asp in Commtouch Enterprise Anti-Spam Gateway 4 and 5 allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter...

CVE-2008-3082

Cross-site scripting XSS vulnerability in UPM/English/login/login.asp in Commtouch Enterprise Anti-Spam Gateway 4 and 5 allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter...

CVE-2008-3082: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in UPM/English/login/login.asp in Commtouch Enterprise Anti-Spam Gateway 4 and 5 allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter...

CVE-2007-3631: Undefined Security Weakness

SQL injection vulnerability in index.php in GameSiteScript gss 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the params parameter, related to missing input validation of the id field...

CVE-2007-3613

Cross-site scripting XSS vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service IGS allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter...

CVE-2007-3613: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service IGS allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter...