CVE-2018-11443

The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0...

PT-2018-10573

Name of the Vulnerable Software and Affected Versions EasyService Billing version 1.0 Description The issue affects the q parameter in jobcard-ongoing.php, where a Cross-site Scripting problem has been identified. Recommendations For EasyService Billing version 1.0, avoid using the q parameter in...

CVE-2018-11444: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0...

CVE-2018-11443: Improper Neutralization of Input During Web Page Generation

The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0...

Grab: [growth.grab.com] Reflected XSS via Base64-encoded "q" param on "my.html" Valentine's microsite

Hi, An encoded injection in the q parameter on my.html can be used to reflect JavaScript in the growth.grab.com context. This microsite creates a "Grab's Valentine" card for a driver over the past year, and carries its data in Base64 format. Proof of concept Please visit the following URL, scroll...

PHP Scripts Mall Single Theater Booking Script SQL Injection Vulnerability

PHP Scripts Mall Single Theater Booking Script is a PHP and MySQL based online theater booking system script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Single Theater Booking Script version 3.2.1. A remote attacker can exploit this vulnerability by sending...

CVE-2017-17617

Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter...

CVE-2017-17632: Improper Neutralization of Special Elements used in an SQL Command

Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

CVE-2017-17634: Improper Neutralization of Special Elements used in an SQL Command

Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

PT-2017-14913

Name of the Vulnerable Software and Affected Versions Foodspotting Clone Script version 1.0 Description The issue is related to SQL Injection, which occurs via the quicksearch.php API endpoint, specifically through the q parameter. This allows for potential exploitation. Recommendations For...

CVE-2017-17617: Improper Neutralization of Special Elements used in an SQL Command

Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter...

PT-2017-14930

Name of the Vulnerable Software and Affected Versions Single Theater Booking Script version 3.2.1 Description The issue is related to SQL Injection, which occurs via the findcity.php q parameter. This allows for potential exploitation. Recommendations For Single Theater Booking Script version...

PT-2017-14928

Name of the Vulnerable Software and Affected Versions Responsive Events And Movie Ticket Booking Script version 3.2.1 Description The issue is related to SQL Injection, which can be exploited via the findcity.php q parameter. This allows for potential unauthorized access to database information...

Sql injection

E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php aka the search private area...

CVE-2017-15373

CVE-2017-15373 : E-Sic 1.0 contains a SQL injection in the query parameter “q” of esiclivre/restrito/inc/lkpcep.php (the search private area). The root cause is improper handling of input leading to arbitrary SQL execution. Impact is described as partial to high confidentiality, integrity, and av...

PT-2017-14031

Name of the Vulnerable Software and Affected Versions E-Sic version 1.0 Description The issue allows SQL injection via the q parameter to the "esiclivre/restrito/inc/lkpcep.php" endpoint, which is related to the search private area. Recommendations For E-Sic version 1.0, consider restricting acce...

CVE-2017-15373: Improper Neutralization of Special Elements used in an SQL Command

E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php aka the search private area...

CVE-2017-12798

Cross-Site Scripting XSS exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php...

CVE-2017-12798: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php...

PT-2017-12696

Name of the Vulnerable Software and Affected Versions NexusPHP version v1.5 Description A Cross-Site Scripting XSS issue exists, allowing for potential code injection. The issue is related to the q parameter in the "searchsuggest.php" endpoint. Recommendations For NexusPHP version v1.5, consider...