128 matches found
jetcost.es XSS vulnerability
Vulnerable URL: http://www.jetcost.es/results.php?sid="alert'OPENBUGBOUNTY'...
ratekhoj.com XSS vulnerability
Open Bug Bounty ID: OBB-66233 Description| Value ---|--- Affected Website:| ratekhoj.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
Homes 4 Sale 'results.php' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30517/info Homes 4 Sale is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
CVE-2010-1111
Multiple cross-site scripting XSS vulnerabilities in Jokes Complete Website allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to joke.php and the 2 searchingred parameter to results.php...
CVE-2010-1111: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Jokes Complete Website allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to joke.php and the 2 searchingred parameter to results.php...
CVE-2009-4716
Cross-site scripting XSS vulnerability in results.php in EDGEPHP EZWebSearch allows remote attackers to inject arbitrary web script or HTML via the language parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in results.php in EDGEPHP EZWebSearch allows remote attackers to inject arbitrary web script or HTML via the language parameter...
CVE-2009-4716
The CVE-2009-4716 entry describes an XSS vulnerability in EDGEPHP EZWebSearch, specifically in results.php where the language parameter can be abused to inject arbitrary web script or HTML. Affected software/component: EDGEPHP EZWebSearch (results.php). Root cause: improper handling of the langua...
CVE-2009-4716: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in results.php in EDGEPHP EZWebSearch allows remote attackers to inject arbitrary web script or HTML via the language parameter...
CVE-2009-4424: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in results.php in the Pyrmont plugin 2 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2009-3595
SQL injection vulnerability in results.php in VS PANEL 7.5.5 allows remote attackers to execute arbitrary SQL commands via the CatID parameter, a different vector than CVE-2009-3590...
Sql injection
SQL injection vulnerability in results.php in VS PANEL 7.5.5 allows remote attackers to execute arbitrary SQL commands via the CatID parameter, a different vector than CVE-2009-3590...
CVE-2009-3595
CVE-2009-3595: SQL injection in VS PANEL 7.5.5 via Cat_ID in results.php allows remote execution of arbitrary SQL commands. Affected product: VS PANEL (version 7.5.5 noted in the description); vector: HTTP parameter Cat_ID; root cause: improper input handling leading to injection. Connected recor...
CVE-2009-3595: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in results.php in VS PANEL 7.5.5 allows remote attackers to execute arbitrary SQL commands via the CatID parameter, a different vector than CVE-2009-3590...
CVE-2009-2890: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in results.php in PHP Scripts Now Riddles allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...
VS Panel 7.5.5 SQL Injection
Homepage: http://www.vspanel.gr/ Product: VS PANEL v.7.5.5 DeScOvRed By:C0D3R-Dz File: results.php ContACt:[email protected] Dork: "Powered by VS PANEL 7.5.5" SQL Injection results.php?CatID=-6+union+select+1,concatusername,0x3a,password,3,4+from+Users-- DeMo...
VS PANEL 7.5.5 - results.php?Cat_ID SQL Injection
VS PANEL 7.5.5 - results.php?CatID SQL Injection Homepage: http://www.vspanel.gr/ Product: VS PANEL v.7.5.5 DeScOvRed By:C0D3R-Dz File: results.php ContACt:[email protected] Dork: "Powered by VS PANEL 7.5.5" SQL Injection...
VS PANEL 7.5.5 (results.php Cat_ID) SQL Injection Vulnerability
No description provided by source. Homepage: http://www.vspanel.gr/ Product: VS PANEL v.7.5.5 DeScOvRed By:C0D3R-Dz File: results.php ContACt:[email protected] Dork: "Powered by VS PANEL 7.5.5" SQL Injection results.php?CatID=-6+union+select+1,concatusername,0x3a,password,3,4+from+Users-- DeMo...
VS PANEL 7.5.5 - 'results.php?Cat_ID' SQL Injection
Homepage: http://www.vspanel.gr/ Product: VS PANEL v.7.5.5 DeScOvRed By:C0D3R-Dz File: results.php ContACt:[email protected] Dork: "Powered by VS PANEL 7.5.5" SQL Injection results.php?CatID=-6+union+select+1,concatusername,0x3a,password,3,4+from+Users-- DeMo...
VS PANEL 7.5.5 (results.php Cat_ID) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =============================================================== VS PANEL 7.5.5 results.php CatID SQL Injection Vulnerability =============================================================== Homepage: http://www.vspanel.gr/ Product: VS PANEL...