EUVD-2018-10155

Malware in sbrugna...

EUVD-2008-2952

Malware in sbrugna...

EUVD-2006-1638

Malware in sbrugna...

EUVD-2019-7821

Malware in sbrugna...

EUVD-2018-7755

Malware in sbrugna...

EUVD-2018-8149

Malware in sbrugna...

CVE-2025-5405

A vulnerability, which was classified as problematic, has been found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. This issue affects some unknown processing of the file /post.php. The manipulation of the argument commentauthor/commentemail/commentcontent leads to cros...

CVE-2025-5405 chaitak-gorai Blogbook post.php cross site scripting

A vulnerability, which was classified as problematic, has been found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. This issue affects some unknown processing of the file /post.php. The manipulation of the argument commentauthor/commentemail/commentcontent leads to cros...

CVE-2025-5405

The CVE-2025-5405 entry concerns chaitak-gorai Blogbook (up to commit 92f5cf90f8a7e6566b576fe0952e14e1c6736513) and specifies a cross-site scripting (XSS) vulnerability in processing the file /post.php. The attack is facilitated by manipulating the arguments comment_author, comment_email, or comm...

CVE-2025-5401

A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /post.php of the component GET Parameter Handler. The manipulation of the argument pid leads...

PT-2025-23432 · Unknown · Chaitak-Gorai Blogbook

Name of the Vulnerable Software and Affected Versions: chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513 Description: A problematic issue has been found in chaitak-gorai Blogbook, affecting the processing of the file /post.php. The manipulation of the arguments comment author,...

CVE-2025-5405: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. This issue affects some unknown processing of the file /post.php. The manipulation of the argument commentauthor/commentemail/commentcontent leads to cros...

Blogbook injection vulnerability

Blogbook is a content management system project by the individual developer Chaitak Gorai. Blogbook has an injection vulnerability that stems from SQL injection in the parameter pid in the file /post.php...

CVE-2022-28524

ED01-CMS v20180505 was discovered to contain a SQL injection vulnerability via the component post.php...

PT-2025-20925 · Unknown · Bootstrap-Multiselect

Name of the Vulnerable Software and Affected Versions: bootstrap-multiselect version 1.1.2 Description: An issue was discovered in post.php, where a PHP script echoes arbitrary POST data. This could create a Reflective Cross-Site Scripting XSS vulnerability exploitable through Cross-Site Request...

CVE-2025-47204: Cross-Site Request Forgery (CSRF)

An issue was discovered in post.php in bootstrap-multiselect aka Bootstrap Multiselect 1.1.2. A PHP script in the source code echoes arbitrary POST data. If a developer adopts this structure wholesale in a live application, it could create a Reflective Cross-Site Scripting XSS vulnerability...

PT-2024-39249

Name of the Vulnerable Software and Affected Versions: OpenTibiaBR MyAAC versions up to 0.8.16 Description: A problematic vulnerability has been found in OpenTibiaBR MyAAC, affecting an unknown function of the file system/pages/forum/new post.php of the component Post Reply Handler. The...

CVE-2024-7162

A vulnerability, which was classified as problematic, has been found in SeaCMS 12.9/13.0. Affected by this issue is some unknown functionality of the file js/player/dmplayer/admin/post.php?act=setting. The manipulation of the argument yzm leads to cross site scripting. The attack may be launched...

CVE-2024-7162: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SeaCMS 12.9/13.0. Affected by this issue is some unknown functionality of the file js/player/dmplayer/admin/post.php?act=setting. The manipulation of the argument yzm leads to cross site scripting. The attack may be launched...

PT-2024-25262

Name of the Vulnerable Software and Affected Versions flusity-CMS version 2.33 Description An issue in the software allows a remote attacker to execute arbitrary code via the "add post.php" component. Recommendations For flusity-CMS version 2.33, consider disabling access to the "add post.php"...