CVE-2019-16664

An issue was discovered in ThinkSAAS 2.91. There is XSS via the index.php?app=group&ac=create&ts=do groupname parameter...

CVE-2019-13472

PHPWind 9.1.0 has XSS vulnerabilities in the c and m parameters of the index.php file...

Multiple cross-site scripting vulnerabilities in Dolibarr ERP/CRM (CNVD-2017-32849)

Dolibarr ERP/CRM is an open source software/freeware for small and medium-sized businesses, organizations or freelancers. It includes different features such as Enterprise Resource Planning ERP and Customer Relationship Management CRM, as well as applications for other different activities...

OpenSNS v2 \Application\People\Controller\IndexController.class.php parameters arearank, the parameter uid SQL injection

No description provided by source...

DLGuard Cross-Site Scripting Vulnerability

DLGuard is a complete sales and customer management system used to protect and streamline online business. A cross-site scripting vulnerability exists in DLGuard. A remote attacker can leverage the 'page', 'c' or 'redirect' parameters in the index.php script or the main page's 'search' field...

PT-2011-5108 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr versions 3.1.0 RC and earlier Description: The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via several parameters in different PHP files, including sortfield, sortorder, and sall...