Cross site scripting

Cross-site scripting XSS vulnerability in Online Examination System 1.0 via the q parameter to feedback.php...

CVE-2020-29257

CVE-2020-29257: Cross-site scripting in Online Examination System 1.0 (SourceCodester Online Examination System) via the q parameter to feedback.php. Root cause: user input in q is not properly filtered, enabling injection of JavaScript that can execute in the victim’s browser. Documented impact:...

SourceCodester Online Examination System 跨站脚本漏洞

SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Online Examination System, which originates from the q parameter does not filter user input, which can be exploited to execute JavaScrip...

CVE-2019-11427

The CVE-2019-11427 entry concerns an XSS vulnerability in idreamsoft iCMS 7.0.14, exploitable via the public/api.php?app=search&q parameter within the file app/search/search.app.php. Connected sources consistently describe the issue as a Cross-Site Scripting vulnerability in iCMS 7.0.14, with no ...

CVE-2018-15566

tp5cms through 2017-05-25 has XSS via the admin.php/article/index.html q parameter...

CVE-2018-15566

tp5cms through 2017-05-25 has XSS via the admin.php/article/index.html q parameter...

CVE-2018-14422

blog/index.php in SansCMS 0.7 has XSS via the q parameter...

CVE-2018-14422

blog/index.php in SansCMS 0.7 has XSS via the q parameter...

Design/Logic Flaw

blog/index.php in SansCMS 0.7 has XSS via the q parameter...

SansCMS Cross-Site Scripting Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in the blog/index.php file in SansCMS version 0.7. A remote attacker can exploit this vulnerabilit...

CVE-2018-14422

blog/index.php in SansCMS 0.7 has XSS via the q parameter...

Schools Alert Management Script SQL Injection Vulnerability (CNVD-2018-11371)

PHP Scripts Mall Schools Alert Management Script is a school management system script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Schools Alert Management Script. A remote attacker can exploit this vulnerability by executing arbitrary SQL commands with the...

Sql injection

SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in getsec.php...

EasyService Billing 1.0 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications !-- Exploit Title: EasyService Billing 1.0 Cross-Site Scripting in 'q' Parameter Software Link: https://codecanyon.net/item/easyservice-billing-php-scripts-for-quotation-invoice-payments-etc/16687594 Exploit Author: Divya Jain Version:...

EasyService Billing Cross-Site Scripting Vulnerability

EasyService Billing is a PHP-based service-oriented consumer business management system . A cross-site scripting vulnerability exists in the 'q' parameter of the jobcard-ongoing.php file in EasyService Billing version 1.0. A remote attacker can exploit this vulnerability to inject arbitrary web...

Appnitro MachForm SQL Injection Vulnerability

Appnitro MachForm is a tool for creating responsive forms in web pages from Appnitro Software Indonesia. A SQL injection vulnerability exists in the download.php file in Appnitro MachForm versions prior to 4.2.3. The vulnerability can be exploited by a remote attacker to browse, add, change, or...

EasyService Billing 1.0 - Cross-Site Scripting

EasyService Billing 1.0 - Cross-Site Scripting !-- Exploit Title: EasyService Billing 1.0 Cross-Site Scripting in 'q' Parameter Date: 25-05-2018 Software Link: https://codecanyon.net/item/easyservice-billing-php-scripts-for-quotation-invoice-payments-etc/16687594 Exploit Author: Divya Jain Versio...

EasyService Billing 1.0 - Cross-Site Scripting

!-- Exploit Title: EasyService Billing 1.0 Cross-Site Scripting in 'q' Parameter Date: 25-05-2018 Software Link: https://codecanyon.net/item/easyservice-billing-php-scripts-for-quotation-invoice-payments-etc/16687594 Exploit Author: Divya Jain Version: EasyService Billing 1.0 CVE: CVE-2018-11443...

CVE-2018-11443

The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0...

Grab: [growth.grab.com] Reflected XSS via Base64-encoded "q" param on "my.html" Valentine's microsite

Hi, An encoded injection in the q parameter on my.html can be used to reflect JavaScript in the growth.grab.com context. This microsite creates a "Grab's Valentine" card for a driver over the past year, and carries its data in Base64 format. Proof of concept Please visit the following URL, scroll...