UNA CMS <= 14.0.0-RC4 - PHP Object Injection

The vulnerability is located in the /template/scripts/BxBaseMenuSetAclLevel.php script. Specifically, within the BxBaseMenuSetAclLevel::getCode method. When calling this method, user input passed through the "profileid" POST parameter is not properly sanitized before being used in a call to the...

CVE-2009-4983

Multiple cross-site scripting XSS vulnerabilities in Silurus Classifieds 1.0 allow remote attackers to inject arbitrary web script or HTML via the ID parameter to 1 category.php and 2 wcategory.php, and the 3 keywords parameter to search.php...

CVE-2009-4222

phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request...

CVE-2019-18923

Insufficient content type validation of proxied resources in go-camo before 2.1.1 allows a remote attacker to serve arbitrary content from go-camo's origin...

CVE-2013-6280

Cross-site scripting XSS vulnerability in Social Sharing Toolkit plugin before 2.1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-1999-0467

The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter...

CVE-2024-2259

This vulnerability exists in InstaRISPACS software due to insufficient validation of user supplied input for the loginTo parameter in user login module of the web interface of the application. A remote attacker could exploit this vulnerability by sending a specially crafted input to the vulnerabl...

EUVD-2010-4334

Malware in sbrugna...

EUVD-2010-4740

Malware in sbrugna...

EUVD-2008-0258

Malware in sbrugna...

EUVD-2006-4817

Malware in sbrugna...

EUVD-2021-24443

Malware in sbrugna...

EUVD-2016-5975

Malware in sbrugna...

EUVD-2012-1451

Malware in sbrugna...

EUVD-2004-1380

Malware in sbrugna...

EUVD-2021-27314

Malware in sbrugna...

EUVD-2021-17467

Malware in sbrugna...

EUVD-2021-13765

Malware in sbrugna...

EUVD-2007-5869

Malware in sbrugna...

EUVD-2018-5345

Malware in sbrugna...