Malicious code in @zalastax/nolb-passe (npm)

The package @zalastax/nolb-passe was found to contain malicious code...

MAL-2025-43355 Malicious code in @zalastax/nolb-passe (npm)

The package @zalastax/nolb-passe was found to contain malicious code...

le-passe-temps.com Improper Access Control vulnerability OBB-3828061

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

passe-compose.de Cross Site Scripting vulnerability OBB-2355016

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

osCommerce 2.2rc2a Cross Site Request Forgery

==================================================== oscommerce 2.2rc2a Changer Login et Mot de Passe CSRF Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

ezAPPAREL Cross Site Request Forgery

==================================================== ezAPPAREL Changer Login et Mot de Passe CSRF Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1...

Boutique SudBox 1.2 Changer Login et Mot de Passe CSRF Vulnerability

Exploit for php platform in category web applications ==================================================================== Boutique SudBox 1.2 Changer Login et Mot de Passe CSRF Vulnerability ====================================================================...

CVE-2008-6165: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in gestion.php in CSPartner 0.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the 1 pseudo and 2 passe parameters...

Tribisur 'forum.php'/'cat_main.php' SQL注入漏洞

BUGTRAQ ID: 27149 CNCAN ID:CNCAN-2008010812 Tribisur是一款基于PHP的WEB应用程序。 Tribisur不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'forum.php'和'catmain.php'脚本对用户提交的WEB参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Thomas PEREZ Tribisur 2.0 厂商解决方案 --------- 目前没有解决方案提供：...

CVE-2007-2000: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in admin/admin.php in Crea-Book 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 pseudo or 2 passe parameter...