EUVD-2009-1455

Malware in sbrugna...

EUVD-2009-2109

Malware in sbrugna...

CVE-2020-23977

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

CVE-2024-46078

itsourcecode Sports Management System Project 1.0 is vulnerable to SQL Injection in the function deletecategory of the file sportsscheduling/player.php via the argument id...

itsourcecode Sports Management System Project 安全漏洞

itsourcecode Sports Management System Project is an open source sports management system by itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Sports Management System Project, which originated from a SQL injection vulnerability found in the deletecategory function of...

CVE-2024-46078

The itsourcecode Sports Management System Project version 1.0 is vulnerable to SQL Injection within the delete_category function of the sports_scheduling/player.php file. This vulnerability is triggered via the id argument, allowing for unauthorized access and manipulation of database content. No...

CVE-2024-46078: Improper Neutralization of Special Elements used in an SQL Command

itsourcecode Sports Management System Project 1.0 is vulnerable to SQL Injection in the function deletecategory of the file sportsscheduling/player.php via the argument id...

Denial Of Service (DoS)

pocketmine/pocketmine-mp is vulnerable to denial of service. The vulnerability exists in the chat function of Player.php due to the lack of message length checks, allowing an attacker to crash the application by providing large messages with many newlines...

GHSA-6922-5V25-P8JG Moodle multiple cross-site scripting (XSS) vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in the SCORM module in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allow remote attackers to inject arbitrary web script or HTML via a crafted organization name to 1 mod/scorm/player.php or 2...

CVE-2020-23977

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

CVE-2020-23973

KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter...

Cross site scripting

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

CVE-2020-23973: Improper Neutralization of Special Elements used in an SQL Command

KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter...

CVE-2020-23977: Improper Neutralization of Input During Web Page Generation

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

aquaultraviolet.com XSS vulnerability

Open Bug Bounty ID: OBB-619797 Description| Value ---|--- Affected Website:| aquaultraviolet.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross-site Scripting (XSS)

Moodle is vulnerable to multiple cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary javascript through an organization name in mod/scorm/player.php or mod/scorm/prereqs.php...

itunestore.com XSS vulnerability

Vulnerable URL: http://www.itunestore.com/player.php?song=CarnegieCouncilAudioPodcast-CarnegieCouncilforEthicsinInternationalAffairs' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

CVE-2015-3275: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the SCORM module in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allow remote attackers to inject arbitrary web script or HTML via a crafted organization name to 1 mod/scorm/player.php or 2...

champspublichealth.com XSS vulnerability

Vulnerable URL: http://www.champspublichealth.com/videos/videoplayer.php?VideoFile=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

tplSoccerStats (player.php) SQL Injection Vulnerability

No description provided by source. tplSoccerStats player.php Sql Injection Vulnerability ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Dork : intitle:Powered by tplSoccerStats inurl:player.php .:. Home :...