CVE-2021-39328: Improper Neutralization of Input During Web Page Generation

The Simple Job Board WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $jobboardprivacypolicylabel variable echo'd out via the /admin/settings/class-simple-job-board-settings-privacy.php file which allowed attackers with administrative user access t...

CVE-2018-12055: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contactus.php, faq.php, about.php, photogallery.php, privacy.php, and so on...

netst.jp XSS vulnerability

Vulnerable URL: http://netst.jp/taichikun/mobile/privacy.php?cartid="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

Unfixed XSS vulnerability at mmo2.myfarmvillage.com

Security researcher Genosite, has submitted on 10/11/2010 a cross-site-scripting XSS vulnerability affecting mmo2.myfarmvillage.com, which at the time of submission ranked 19921 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

Sql injection

SQL injection vulnerability in options.php in WordPress 2.2.1 allows remote authenticated administrators to execute arbitrary SQL commands via the pageoptions parameter to 1 options-general.php, 2 options-writing.php, 3 options-reading.php, 4 options-discussion.php, 5 options-privacy.php, 6...