CVE-2025-34328

AudioCodes Fax Server and Auto-Attendant IVR appliances (≤ 2.6.23) expose an unauthenticated script-management endpoint in the web administration component (F2MAdmin) at AudioCodes_files/utils/IVR/diagram/ajaxScript.php. The saveScript action writes attacker-supplied data directly to a server-sid...

EUVD-2018-7752

Malware in sbrugna...

EUVD-2018-7069

Malware in sbrugna...

EUVD-2008-2277

Malware in sbrugna...

EUVD-2017-8771

Malware in sbrugna...

EUVD-2019-10890

Malware in sbrugna...

Cross site scripting

A vulnerability was found in GZ Scripts Car Listing Script PHP 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file /preview.php. The manipulation of the argument page/sortby leads to cross site scripting. The attack can be initiated remotely. VDB-233350 i...

Cross site scripting

A vulnerability classified as problematic has been found in SimplePHPscripts News Script PHP Pro 2.4. This affects an unknown part of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The...

Cross site scripting

A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be...

CVE-2023-3535

The CVE-2023-3535 issue affects SimplePHPscripts FAQ Script PHP 2.3, where the vulnerability exists in the /preview.php file of the URL Parameter Handler. Argument manipulation can trigger cross-site scripting (XSS) and can be exploited remotely over the network. The connected sources consistentl...

CVE-2023-3537: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in SimplePHPscripts News Script PHP Pro 2.4. This affects an unknown part of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The...

News Script PHP Pro Cross-Site Scripting Vulnerability

News Script PHP Pro is a PHP/MySQL based web script from Simple PHP Scripts for displaying news on your website. A cross-site scripting vulnerability exists in News Script PHP Pro 2.3. The vulnerability can be exploited to conduct cross-site scripting attacks via the editorname parameter...

Sql injection

SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action...

Session fixation

SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies...

Cross site request forgery (csrf)

SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery CSRF vulnerability, which allows attackers to add new users...

PT-2020-16094

Name of the Vulnerable Software and Affected Versions SimplePHPscripts News Script PHP Pro version 2.3 Description The issue is a SQL Injection via the id parameter in an editNews action. This allows for potential exploitation of the software. Recommendations For SimplePHPscripts News Script PHP...

PT-2020-16093

Name of the Vulnerable Software and Affected Versions SimplePHPscripts News Script PHP Pro version 2.3 Description The issue is a Cross Site Scripting XSS vulnerability. It can be exploited via the editor name parameter. Recommendations For SimplePHPscripts News Script PHP Pro version 2.3, avoid...

CVE-2020-25475: Improper Neutralization of Special Elements used in an SQL Command

SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action...

PT-2020-16091

Name of the Vulnerable Software and Affected Versions SimplePHPscripts News Script PHP Pro version 2.3 Description The issue allows attackers to add new users due to a Cross Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on the...

CVE-2020-25474: Improper Neutralization of Input During Web Page Generation

SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting XSS vulnerability via the editorname parameter...