CVE-2016-10993

The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...

Design/Logic Flaw

The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...

CVE-2016-10993

The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...

CVE-2017-18599

The Pinfinity theme before 2.0 for WordPress has XSS via the s parameter...

Design/Logic Flaw

The Pinfinity theme before 2.0 for WordPress has XSS via the s parameter...

CVE-2017-18599

The Pinfinity theme before 2.0 for WordPress has XSS via the s parameter...

bluestarcooking.com XSS vulnerability

Open Bug Bounty ID: OBB-672223 Description| Value ---|--- Affected Website:| bluestarcooking.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

DamiCMS Directory Traversal Vulnerability

DamiCMS is a content management system CMS for building websites quickly. A directory traversal vulnerability exists in the admin.php file in DamiCMS version 6.0.1, which can be exploited to read the contents of the file with the help of the '|' character in the 's' parameter...

CVE-2018-16237

An issue was discovered in damiCMS V6.0.1. There is Directory Traversal via '|' characters in the s parameter to admin.php, as demonstrated by an admin.php?s=Tpl/Add/id/c:|windows|win.ini URI...

LFCMS Cross-Site Request Forgery Vulnerability

LFCMS is a PHP based on THINKPHP3.2.3 framework development, suitable for all kinds of video, film and television websites, film and television content management program. LFCMS 3.7.0 admin.php cross-site request forgery vulnerability exists. Remote attackers can use this vulnerability to hijack...

CVE-2018-12603

Cross-site request forgery CSRF vulnerability in admin.php in LFCMS 3.7.0 allows remote attackers to hijack the authentication of unspecified users for requests that add administrator users via the s parameter, a related issue to CVE-2018-12114...

CVE-2018-11568

Reflected XSS is possible in the GamePlan theme through 1.5.13.2 for WordPress because of insufficient input sanitization, as demonstrated by the s parameter. In some but not all cases, the '' characters have and representations...

CVE-2018-10225

thinkphp 3.1.3 has SQL Injection via the index.php s parameter...

Schneider Electric U.motion Builder Directory Traversal Vulnerability

U.motion Builder is a generator product from Schneider Electric France. A directory traversal vulnerability exists in Schneider Electric U.motion Builder when handling the 's' parameter of an applet. The vulnerability exists in the runscript.php applet and can be exploited to obtain sensitive...

Techno - Portfolio Management Panel SQL Injection Vulnerability

Techno - Portfolio Management Panel is a set of portfolio management panel scripts. A SQL injection vulnerability exists in Techno - Portfolio Management Panel 2017-11-16 and earlier versions. A remote attacker can exploit the vulnerability by sending the 's' parameter to the panel/search.php fil...

CVE-2017-17696

Techno - Portfolio Management Panel through 2017-11-16 allows full path disclosure via an invalid s parameter to panel/search.php...

CVE-2017-17696

Techno - Portfolio Management Panel is affected by an information disclosure vulnerability through an invalid s parameter to panel/search.php, enabling disclosure of sensitive paths. The CVE notes impact as a path disclosure; affected versions include 2017-11-16 and earlier. Connected sources (CN...

Creative Management System Lite SQL Injection Vulnerability

Creative Management System CMS Lite is a web content management system with features such as menu design, site backup and site calendar. A SQL injection vulnerability exists in CMS Lite version 1.4. A remote attacker can exploit the vulnerability by sending the 'S' parameter to the index.php file...

Sql injection

Creative Management System CMS Lite 1.4 allows SQL Injection via the S parameter to index.php...

Gxlcms Arbitrary File Read Vulnerability

Gxlcms is an enterprise website creation system. A security vulnerability exists in Gxlcms that originates from the program using an insecure method to restrict access. The vulnerability can be exploited by a remote attacker to read arbitrary files by sending an 's' parameter with a changed...