PT-2025-42433

Name of the Vulnerable Software and Affected Versions Sergestec Exito version 8.0 Description A SQL injection issue exists in Sergestec Exito version 8.0. This allows an attacker to retrieve, create, update, and delete databases. The vulnerability is present in the 'cat' parameter of the...

CVE-2025-41018: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in Sergestec's Exito v8.0. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'cat' parameter in '/public.php'...

CVE-2019-25145: Improper Neutralization of Input During Web Page Generation

The Contact Form & SMTP Plugin by PirateForms plugin for WordPress is vulnerable to HTML injection in the ‘public/class-pirateforms-public.php’ file in versions up to, and including, 2.5.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

Tiny Tiny RSS SQL Injection Vulnerability

Tiny Tiny RSS is an open source RSS Really Simple Syndication reader written in PHP. forgotpass component is one of the password recovery component. A SQL injection vulnerability exists in the classes/handler/public.php file of the forgotpass component in Tiny Tiny RSS version 17.4. A remote...

CVE-2017-16896

A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter...

CVE-2017-16896: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter...

PT-2014-4258

Name of the Vulnerable Software and Affected Versions Dotclear versions prior to 2.6.2 Description The issue allows remote attackers to execute arbitrary PHP code via a serialized object in the dc passwd cookie to a password-protected page. This is due to improper handling by certain PHP files,...