1094 matches found
CVE-2018-14012: Improper Neutralization of Special Elements used in an SQL Command
WolfSight CMS 3.2 allows SQL injection via the PATHINFO to the default URI...
Design/Logic Flaw
TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATHINFO to the /webpages/data URI...
CVE-2018-13134
TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATHINFO to the /webpages/data URI...
CVE-2018-13134: Improper Neutralization of Input During Web Page Generation
TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATHINFO to the /webpages/data URI...
Sql injection
router.php in the Harmis Ek rishta aka ek-rishta 2.10 component for Joomla! allows SQL Injection via the PATHINFO to a home/requesteduser/Sent%20interest/ URI...
CVE-2018-12254: Improper Neutralization of Special Elements used in an SQL Command
router.php in the Harmis Ek rishta aka ek-rishta 2.10 component for Joomla! allows SQL Injection via the PATHINFO to a home/requesteduser/Sent%20interest/ URI...
CVE-2018-12111
Cross-site scripting XSS vulnerability in the Canon PrintMe EFI webinterface allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the /wt3/mydocs.php URI...
Cross site scripting
Cross-site scripting XSS vulnerability in the Canon PrintMe EFI webinterface allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the /wt3/mydocs.php URI...
CVE-2018-12111
The provided connected sources confirm CVE-2018-12111 affects Canon PrintMe EFI webinterface, specifically the /wt3/mydocs.php URI. The vulnerability is a Cross-Site Scripting (XSS) flaw where an attacker can inject arbitrary script/HTML via PATH_INFO, enabling code execution in the context of th...
CVE-2018-12111
Cross-site scripting XSS vulnerability in the Canon PrintMe EFI webinterface allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the /wt3/mydocs.php URI...
CVE-2018-12111: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Canon PrintMe EFI webinterface allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the /wt3/mydocs.php URI...
CVE-2017-9838
Dolibarr ERP/CRM is affected by multiple reflected Cross-Site Scripting XSS vulnerabilities in versions before 5.0.4: index.php leftmenu parameter, core/ajax/box.php PATHINFO, product/stats/card.php type parameter, holiday/list.php monthcreate, monthstart, and monthend parameters, and don/card.ph...
Grav CMS system/src/Grav/Common/Twig/Twig.php file cross-site scripting vulnerability
Grav CMS is a scalable CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. A cross-site scripting vulnerability exists in the system/src/Grav/Common/Twig/Twig.php file in Grav CMS version 1.3.0. A remote attacker can inject...
Cross site scripting
Cross-site scripting XSS vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin/tools...
CVE-2018-5233
Grav CMS
CVE-2018-5233
Cross-site scripting XSS vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin/tools...
CVE-2018-5233: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin/tools...
Sql injection
SQL Injection exists in the NeoRecruit 4.1 component for Joomla! via the 1 PATHINFO or 2 name of a .html file under the all-offers/ URI...
CVE-2018-6370
CVE-2018-6370 affects the NeoRecruit Joomla! extension (version 4.1 and earlier) via SQL Injection in the NeoRecruit 4.1 component, exploitable through PATH_INFO or the name of a .html file under the all-offers/ URI. Multiple sources (NVD entry, Joomla/NeoRecruit notices, Exploit-DB) document the...
CVE-2018-6370: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the NeoRecruit 4.1 component for Joomla! via the 1 PATHINFO or 2 name of a .html file under the all-offers/ URI...