1094 matches found
CVE-2019-20515
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the addresses/ URI...
CVE-2019-20521
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the api/ URI...
CVE-2019-20516
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the blog/ URI...
CVE-2019-16657
TuziCMS 2.0.6 has XSS via the PATHINFO to a group URI, as demonstrated by index.php/article/group/id/2/...
CVE-2025-13623: Improper Neutralization of Input During Web Page Generation
The Twitscription plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATHINFO in all versions up to, and including, 0.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2025-64500: Use of Non-Canonical URL Paths for Authorization Decisions
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundation component defines an object-oriented layer for the HTTP specification. Starting in version 2.0.0 and prior to version 5.4.50, 6.4.29, and 7.3.7, the Request class improperly...
EUVD-2010-0966
Malware in sbrugna...
EUVD-2008-2491
Malware in sbrugna...
EUVD-2007-4465
Malware in sbrugna...
EUVD-2009-1550
Malware in sbrugna...
EUVD-2012-0956
Malware in sbrugna...
EUVD-2009-4445
Malware in sbrugna...
EUVD-2007-2906
Malware in sbrugna...
EUVD-2019-4414
Malware in sbrugna...
EUVD-2017-7375
Malware in sbrugna...
EUVD-2017-4430
Malware in sbrugna...
EUVD-2013-4934
Malware in sbrugna...
EUVD-2018-10351
Malware in sbrugna...