CVE-2017-17605: Improper Neutralization of Special Elements used in an SQL Command

Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter...

indivibe.com XSS vulnerability

Vulnerable URL: http://www.indivibe.com/profile.php?id=13'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2283335 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerabilit...

pixelitist.com XSS vulnerability

Vulnerable URL: http://pixelitist.com/profile.php?id=13'"150 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure...

law.knu.ac.kr XSS vulnerability

Vulnerable URL: http://law.knu.ac.kr/greeting/profile.php?id=%22%3EKeritzy%3Cimg%20src=x%20onerror=prompt%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

collegesearch.in XSS vulnerability

Vulnerable URL: https://www.collegesearch.in/send-profile.php?instituteid=2405%22%3E%3Ch1%3EM0ns7er%3C/h1%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/br%3E%3Cimg%20src=%22https://images.cooltext.com/4956678.gif%22%20width=%22166%22%20height=%2270%22%20alt=%22m0ns7er%22%20/%3E Details...

CVE-2017-10673

admin/profile.php in GetSimple CMS 3.x has XSS in a name field...

CVE-2017-10673

admin/profile.php in GetSimple CMS 3.x has XSS in a name field...

CVE-2017-10673: Improper Neutralization of Input During Web Page Generation

admin/profile.php in GetSimple CMS 3.x has XSS in a name field...

physics.dur.ac.uk XSS vulnerability

Vulnerable URL: https://www.physics.dur.ac.uk/profiles/profile.php?userid=--%3E%22%3E%3C/a%3E%3C/script%3E%3C/title%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

webhostingtalk.com XSS vulnerability

Vulnerable URL: http://www.webhostingtalk.com/profile.php?do=dismissnotice Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3634 Google Pagerank| 5 VIP website status:| Yes Check...

ugcnetonline.in XSS vulnerability

Vulnerable URL: http://www.ugcnetonline.in/[email protected]=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 98681...

modelportfolio4hire.com XSS vulnerability

Vulnerable URL: http://modelportfolio4hire.com/profile.php?name=%27%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=91 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Ultimate PHP Board aka myUPB before 2.2.8 allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to search.php or 2 avatar parameter to profile.php...

CVE-2015-2217

Ultimate PHP Board (UPB, also known as myUPB) is affected by multiple XSS vulnerabilities. The CVE-2015-2217 entry describes remote XSS via the q parameter in search.php or the avatar parameter in profile.php, with impact described as injection of arbitrary web script/HTML. Public sources within ...

CVE-2015-2217: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Ultimate PHP Board aka myUPB before 2.2.8 allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to search.php or 2 avatar parameter to profile.php...

Sql injection

SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the reqnewemail parameter...

CVE-2014-10029

FluxBB contains a SQL injection vulnerability in profile.php (req_new_email) exploitable on FluxBB before 1.4.13 and 1.5.x before 1.5.7. The flaw stems from insufficient input sanitization in the change_email flow, enabling remote attackers to execute arbitrary SQL commands. Affected versions: Fl...

CVE-2014-10029

SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the reqnewemail parameter...

CVE-2014-10029: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the reqnewemail parameter...

CVE-2013-4753: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.11.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via 1 the Search field in an inbox action to messaging/messagebox.php, 2 the "First name" field to auth/profile.php, or 3 the Speakers field in...