Lucene search
+L

7 matches found

Kitploit
Kitploit
•added 2026/09/28 5:20 p.m.•12 views

CVE-2026-76565

XSS Reflejado a través de los parámetros de filtro pricefrom / priceto en PhocaCart PhocaCart ≤ 6.1.7 — Un atacante no autenticado inyecta JavaScript arbitrario a través de una URL de filtro de precio manipulada RESUMEN PhocaCart 6.1.7 para Joomla es vulnerable a Cross-Site Scripting Reflejado XS...

5.3CVSS6.2AI score0.00436EPSS
SaveExploits1References2
NVD
NVD
•added 2026/08/20 8:16 a.m.•14 views

CVE-2026-76565

Joomla Extension - phoca.cz - Reflected XSS via pricefrom & priceto filter parameters in Phoca Cart 5.0.0-6.1.7...

5.3CVSS0.00436EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/08/20 7:27 a.m.•39 views

CVE-2026-76565 Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7

Joomla Extension - phoca.cz - Reflected XSS via pricefrom & priceto filter parameters in Phoca Cart 5.0.0-6.1.7...

5.3CVSS0.00436EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/08/20 7:27 a.m.•18 views

CVE-2026-76565 Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7

Joomla Extension - phoca.cz - Reflected XSS via pricefrom & priceto filter parameters in Phoca Cart 5.0.0-6.1.7...

5.3CVSS5.8AI score0.00436EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/20 12:00 a.m.•0 views

CVE-2026-76565: Improper Neutralization of Input During Web Page Generation

Joomla Extension - phoca.cz - Reflected XSS via pricefrom & priceto filter parameters in Phoca Cart 5.0.0-6.1.7...

5.3CVSS5.7AI score0.00436EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2012/02/02 5:00 p.m.•39 views

CVE-2012-0982

SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone aka The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the pricefrom parameter...

10AI score0.01003EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/02/02 12:00 a.m.•5 views

CVE-2012-0982: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone aka The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the pricefrom parameter...

7.5CVSS8.6AI score0.01003EPSS
SaveExploits2References2
Rows per page
Query Builder