16 matches found
CVE-2019-16312
s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...
EUVD-2019-19280
Malware in sbrugna...
EUVD-2019-7102
Malware in sbrugna...
code-projects E-Health Care System 注入漏洞
Code-Projects E-Health Care System is an e-health care system from Code-Projects open source. An injection vulnerability exists in code-projects E-Health Care System version 1.0, which stems from the parameter sid in the file /Admin/detail.php that can lead to SQL injection...
CVE-2019-16312
s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...
CVE-2019-16312
s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...
Design/Logic Flaw
s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...
CVE-2019-16312
CVE-2019-16312 affects s-cms v3.0 with a stored/reflected XSS in index.php?type=text via the S_id parameter. The Red Hat and NVD entries confirm the same description; public details are limited to the XSS path and parameter, with no explicit exploitation vectors or patched versions provided in th...
CVE-2019-16312
s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...
CVE-2019-9925
S-CMS PHP v1.0 has XSS in 4.edu.php via the Sid parameter...
Design/Logic Flaw
S-CMS PHP v1.0 has XSS in 4.edu.php via the Sid parameter...
CVE-2019-9925
S-CMS PHP v1.0 has XSS in 4.edu.php via the Sid parameter...
Sql injection
An issue was discovered in S-CMS 1.0. It allows SQL Injection via the wapindex.php?type=newsinfo Sid parameter...
CVE-2018-20018
S-CMS V3.0 has SQL injection via the Sid parameter, as demonstrated by the /1/?type=productinfo&Sid=140 URI...
CVE-2018-20018
S-CMS V3.0 has SQL injection via the Sid parameter, as demonstrated by the /1/?type=productinfo&Sid=140 URI...
Unfixed XSS vulnerability at www.glp-group.eu
Security researcher F3nix, has submitted on 25/01/2008 a cross-site-scripting XSS vulnerability affecting www.glp-group.eu, which at the time of submission ranked 6913792 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/02/2008. It is current...