CVE-2018-10297

Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp∾=article URI, related to mishandling of IMG elements associated with remote images...

EUVD-2018-2371

Malware in sbrugna...

EUVD-2008-3059

Malware in sbrugna...

EUVD-2025-28728

Malicious code in bioql PyPI...

Simple Pizza Ordering System portal.php File SQL Injection Vulnerability

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file /portal.php. An attacker can exploit this vulnerability...

CVE-2025-6360

A vulnerability classified as critical has been found in code-projects Simple Pizza Ordering System 1.0. This affects an unknown part of the file /portal.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed...

CVE-2025-6360

CVE-2025-6360 affects Simple Pizza Ordering System v1.0, with a SQL injection in portal.php caused by unsafely handling the ID parameter. The vulnerability can be exploited remotely; multiple connected sources (CNVD, CNNVD, Red Hat, CVE lists, and PT-Security) report it and note public disclosure...

CVE-2025-6360 code-projects Simple Pizza Ordering System portal.php sql injection

A vulnerability classified as critical has been found in code-projects Simple Pizza Ordering System 1.0. This affects an unknown part of the file /portal.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed...

CVE-2024-5117

A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. This affects an unknown part of the file portal.php. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack remotely. The exploit...

Cross site scripting

Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associated with remote images...

CVE-2018-10297

Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associated with remote images...

CVE-2018-10297

CVE-2018-10297 affects Discuz! DiscuzX through X3.4. The vulnerability is a stored XSS via the URL portal.php?mod=portalcp&ac=article, caused by mishandling of IMG elements linked to remote images. Multiple connected sources (NVD, Red Hat, CNVD, CVE records) report the same issue across Discuz! D...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in MyBB before 1.2.13 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 portal.php and 2 inc/functionspost.php...

CVE-2008-3069

Multiple cross-site scripting XSS vulnerabilities in MyBB before 1.2.13 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 portal.php and 2 inc/functionspost.php...

CVE-2007-0684

The CVE-2007-0684 entry describes a PHP remote file inclusion vulnerability in portal.php of Cerulean Portal System 0.7b. It allows an attacker to execute arbitrary PHP code by supplying a URL in the phpbb_root_path parameter. The affected component is Cerulean Portal System 0.7b, with portal.php...

vBulletin 3.0.10 - Portal.php SQL Injection

vBulletin 3.0.10 - Portal.php SQL Injection source: https://www.securityfocus.com/bid/18197/info vBulletin is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

PHPBB2 Plus 1.5 - 'Portal.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/13151/info phpBB2 Plus is affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute...