EUVD-2017-4348

Malware in sbrugna...

EUVD-2008-2274

Malware in sbrugna...

CVE-2021-21380

CVE-2021-21380 affects XWiki Platform when the Ratings API is installed. The Rating Script Service exposes an API to perform SQL requests without escaping the from and where arguments, enabling SQL injection by any user with Script rights. The issue is fixed in XWiki 12.9RC1. A workaround is to u...

CVE-2021-21380: Improper Neutralization of Special Elements used in an SQL Command

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions of XWiki Platform and only those with the Ratings API installed, the Rating Script Service expose an API to perform SQL requests without escaping the from and where search...

StivaSoft PHPJabbers Star Rating Script Cross-Site Scripting Vulnerability

StivaSoft PHPJabbers Star Rating Script is a set of online rating scripts from StivaSoft Bulgaria. A cross-site scripting vulnerability exists in StivaSoft PHPJabbers Star Rating Script. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via rating entries...

CVE-2017-12811

PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...

CVE-2017-12811

PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...

Cross site scripting

PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...

CVE-2017-12811

Summary of CVE-2017-12811 : PHPJabbers Star Rating Script 4.0 is affected by a stored cross-site scripting (XSS) vulnerability via a rating item. The CVE entry confirms the issue but does not provide explicit exploit details, affected file paths, or versions beyond 4.0 in the description. Connect...

CVE-2017-12811

PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...

CVE-2017-12811: Improper Neutralization of Input During Web Page Generation

PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item...

Programs Rating rate.php id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/35746/info Programs Rating Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...

I-Rater Pro/Plantinum 4.0 - (Auth Bypass) SQL Injection Vulnerability

No description provided by source. I-Rater Platinum V4 By : Hakxer Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Datafr34ck3r , HcJ , Virushima I-Rater Platinum V4 Auth bypass Sql injection poc : http://www.i-rater.com/platinumadmin.html in username : admin 'or' 1=1 in...

City Directory Review and Rating Script - search.php SQL Injection

City Directory Review and Rating Script - search.php SQL Injection Exploit Title: City Directory Review and Rating Script SQL Injection Vulnerability Date: 22.12.2012 Author: 3spi0n Script Vendor or Software Link: http://b-scripts.com/en/18-city-reviewer-yelp-clone.html Category: WebApps Type: SQ...

CVE-2009-4690

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rate.php and 2 postcomments.php...

CVE-2009-4690

The CVE-2009-4690 entry concerns YourFreeWorld Programs Rating Script with two XSS vulnerabilities. Affected component: rating functionality that reads the id parameter in rate.php and postcomments.php. Root cause: reflected cross-site scripting that allows remote attackers to inject arbitrary we...

CVE-2009-4690: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rate.php and 2 postcomments.php...

Programs Rating - 'rate.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35746/info Programs Rating Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

I-Rater Pro/Plantinum v4 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== I-Rater Pro/Plantinum v4 Auth Bypass SQL Injection Vulnerability ================================================================== I-Rater Platinum V4 By : Hakxer I-Rater...

I-Rater Pro/Plantinum v4 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. I-Rater Platinum V4 By : Hakxer Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Datafr34ck3r , HcJ , Virushima I-Rater Platinum V4 Auth bypass Sql injection poc : http://www.i-rater.com/platinumadmin.html in username : admin 'or' 1=1 in...