PT-2026-95460

Name of the Vulnerable Software and Affected Versions gedelumbung HospitalManagement versions up to c2d45543789a3887067d3915f69d44cfc2cf76a8 Description Improper authentication occurs in the Password Change Handler component due to the manipulation of the kode user or username arguments. This iss...

PluXML 5.8.7 Cross Site Scripting

Exploit Title: XSS-Stored on PluXML 5.8.7 - latest parameter "idcontent" Author: nu11secur1ty Testing and Debugging: nu11secur1ty Date: 08.13.2021 Vendor: https://pluxml.org/ Link: https://sourceforge.net/projects/chikitsa/ CVE: CVE-2021-38603 + Exploit Source: !/usr/bin/python3 Author:...

CVE-2021-38603

PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field...

CVE-2021-38603

PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field...

CVE-2021-38603

PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field...

PT-2021-3935

Name of the Vulnerable Software and Affected Versions PluXML version 5.8.7 Description The issue is related to a stored XSS vulnerability in the core/admin/profil.php file of the PluXML content management system. This vulnerability exists due to inadequate protection of the web page structure...

CVE-2021-38603: Improper Neutralization of Input During Web Page Generation

PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field...

PluXml 跨站脚本漏洞

PluXml is a free and open source content management system that does not require a database to work. A cross-site scripting vulnerability exists in PluXML, which stems from the core/admin/profil.php page Allow Stored XSS via Information field vulnerability...

CVE-2010-4619

SQL injection vulnerability in profil.php in Mafya Oyun Scrpti aka Mafia Game Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4619

CVE-2010-4619 describes an SQL injection in profil.php of Mafya Oyun Scrpti (aka Mafia Game Script), exploitable via the id parameter to allow remote execution of arbitrary SQL commands. This entry is corroborated by multiple sources (NVD/NVD mirrors, CVE lists). No explicit patch/version details...

CVE-2010-4619: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profil.php in Mafya Oyun Scrpti aka Mafia Game Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2010-5585

Name of the Vulnerable Software and Affected Versions Mafya Oyun Scrpti aka Mafia Game Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the profil.php file. Recommendations At the momen...

CVE-2010-1071

SQL injection vulnerability in profil.php in phpMDJ 1.0.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-1071: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profil.php in phpMDJ 1.0.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in profil.php in Bigforum 4.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0948

CVE-2010-0948 affects Bigforum 4.5 in the profil.php script. The vulnerability is a SQL injection in the id parameter when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL commands. Documented impact is partial confidentiality/integrity/availability. The OpenVAS en...

CVE-2010-0948: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profil.php in Bigforum 4.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in service/profil.php in ClanLite 2.2006.05.20 allows remote attackers to execute arbitrary SQL commands via the link parameter...

CVE-2008-5215

ClanLite has an SQL injection vulnerability (CVE-2008-5215) in service/profil.php of version 2.2006.05.20 that allows remote attackers to inject arbitrary SQL via the link parameter. Public references indicate exploitation activity exists (e.g., exploit-db, X-Force). Root cause is unsafe handling...

CVE-2008-5215: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in service/profil.php in ClanLite 2.2006.05.20 allows remote attackers to execute arbitrary SQL commands via the link parameter...