EUVD-2009-1455

Malware in sbrugna...

EUVD-2009-2109

Malware in sbrugna...

CVE-2020-23977

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

CVE-2024-46078

itsourcecode Sports Management System Project 1.0 is vulnerable to SQL Injection in the function deletecategory of the file sportsscheduling/player.php via the argument id...

CVE-2024-46078

The itsourcecode Sports Management System Project version 1.0 is vulnerable to SQL Injection within the delete_category function of the sports_scheduling/player.php file. This vulnerability is triggered via the id argument, allowing for unauthorized access and manipulation of database content. No...

itsourcecode Sports Management System Project Security Vulnerabilities

itsourcecode Sports Management System Project is an open source sports management system by itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Sports Management System Project, which originated from a SQL injection vulnerability found in the deletecategory function of...

CVE-2024-46078: Improper Neutralization of Special Elements used in an SQL Command

itsourcecode Sports Management System Project 1.0 is vulnerable to SQL Injection in the function deletecategory of the file sportsscheduling/player.php via the argument id...

Denial Of Service (DoS)

pocketmine/pocketmine-mp is vulnerable to denial of service. The vulnerability exists in the chat function of Player.php due to the lack of message length checks, allowing an attacker to crash the application by providing large messages with many newlines...

GHSA-6922-5V25-P8JG Moodle multiple cross-site scripting (XSS) vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in the SCORM module in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allow remote attackers to inject arbitrary web script or HTML via a crafted organization name to 1 mod/scorm/player.php or 2...

CVE-2020-23977

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

CVE-2020-23973

KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter...

Cross site scripting

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

CVE-2020-23977: Improper Neutralization of Input During Web Page Generation

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

CVE-2020-23973: Improper Neutralization of Special Elements used in an SQL Command

KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter...

PT-2020-6754

Name of the Vulnerable Software and Affected Versions KandNconcepts Club CMS versions 1.1 through 1.2 Description The issue concerns a cross-site scripting problem via the id parameter in the team.php, player.php, and club.php scripts. This occurs due to inadequate protection of the webpage...

PT-2020-15608

Name of the Vulnerable Software and Affected Versions KandNconcepts Club CMS versions 1.1 through 1.2 Description The issue concerns SQL Injection, which can be exploited via the id parameter in the 'team.php', 'player.php', and 'club.php' files. Recommendations For versions 1.1 and 1.2, avoid...

PT-2018-11463

Name of the Vulnerable Software and Affected Versions joyplus-cms version 1.6.0 Description The issue is related to an XSS in the admin player.php file, specifically with the "system manage" and "add" actions in the manager/index.php file. Recommendations For joyplus-cms version 1.6.0, consider...

aquaultraviolet.com XSS vulnerability

Open Bug Bounty ID: OBB-619797 Description| Value ---|--- Affected Website:| aquaultraviolet.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross-site Scripting (XSS)

Moodle is vulnerable to multiple cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary javascript through an organization name in mod/scorm/player.php or mod/scorm/prereqs.php...

itunestore.com XSS vulnerability

Vulnerable URL: http://www.itunestore.com/player.php?song=CarnegieCouncilAudioPodcast-CarnegieCouncilforEthicsinInternationalAffairs' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...