CVE-2018-14422

blog/index.php in SansCMS 0.7 has XSS via the q parameter...

CVE-2018-14422

blog/index.php in SansCMS 0.7 has XSS via the q parameter...

Design/Logic Flaw

blog/index.php in SansCMS 0.7 has XSS via the q parameter...

SansCMS Cross-Site Scripting Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in the blog/index.php file in SansCMS version 0.7. A remote attacker can exploit this vulnerabilit...

CVE-2018-14422

blog/index.php in SansCMS 0.7 has XSS via the q parameter...

CVE-2018-14422: Improper Neutralization of Input During Web Page Generation

blog/index.php in SansCMS 0.7 has XSS via the q parameter...

PT-2018-12504

Name of the Vulnerable Software and Affected Versions SansCMS version 0.7 Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the q parameter of the 'blog/index.php' endpoint. Recommendations...

Schools Alert Management Script SQL Injection Vulnerability (CNVD-2018-11371)

PHP Scripts Mall Schools Alert Management Script is a school management system script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Schools Alert Management Script. A remote attacker can exploit this vulnerability by executing arbitrary SQL commands with the...

Sql injection

SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in getsec.php...

PT-2018-10973

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Schools Alert Management Script affected versions not specified Description The issue exists due to SQL Injection in the PHP Scripts Mall Schools Alert Management Script. Specifically, the vulnerability is exploitable via the ...

CVE-2018-12052: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in getsec.php...

EasyService Billing 1.0 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications !-- Exploit Title: EasyService Billing 1.0 Cross-Site Scripting in 'q' Parameter Software Link: https://codecanyon.net/item/easyservice-billing-php-scripts-for-quotation-invoice-payments-etc/16687594 Exploit Author: Divya Jain Version:...

EasyService Billing Cross-Site Scripting Vulnerability

EasyService Billing is a PHP-based service-oriented consumer business management system . A cross-site scripting vulnerability exists in the 'q' parameter of the jobcard-ongoing.php file in EasyService Billing version 1.0. A remote attacker can exploit this vulnerability to inject arbitrary web...

Appnitro MachForm SQL Injection Vulnerability

Appnitro MachForm is a tool for creating responsive forms in web pages from Appnitro Software Indonesia. A SQL injection vulnerability exists in the download.php file in Appnitro MachForm versions prior to 4.2.3. The vulnerability can be exploited by a remote attacker to browse, add, change, or...

CVE-2018-6409: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Appnitro MachForm before 4.2.3. The module in charge of serving stored files gets the path from the database. Modifying the name of the file to serve on the corresponding apform table leads to a path traversal vulnerability via the download.php q parameter...

PT-2018-17541

Name of the Vulnerable Software and Affected Versions Appnitro MachForm versions prior to 4.2.3 Description An issue was discovered in Appnitro MachForm. There is a SQL injection vulnerability via the q parameter in the "download.php" endpoint. Recommendations For versions prior to 4.2.3, update ...

EasyService Billing 1.0 - Cross-Site Scripting

EasyService Billing 1.0 - Cross-Site Scripting !-- Exploit Title: EasyService Billing 1.0 Cross-Site Scripting in 'q' Parameter Date: 25-05-2018 Software Link: https://codecanyon.net/item/easyservice-billing-php-scripts-for-quotation-invoice-payments-etc/16687594 Exploit Author: Divya Jain Versio...

CVE-2018-6410: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Appnitro MachForm before 4.2.3. There is a download.php SQL injection via the q parameter...

PT-2018-17540

Name of the Vulnerable Software and Affected Versions Appnitro MachForm versions prior to 4.2.3 Description An issue was discovered that leads to a path traversal vulnerability. The module responsible for serving stored files retrieves the path from the database. By modifying the file name in the...

EasyService Billing 1.0 - Cross-Site Scripting

!-- Exploit Title: EasyService Billing 1.0 Cross-Site Scripting in 'q' Parameter Date: 25-05-2018 Software Link: https://codecanyon.net/item/easyservice-billing-php-scripts-for-quotation-invoice-payments-etc/16687594 Exploit Author: Divya Jain Version: EasyService Billing 1.0 CVE: CVE-2018-11443...