1240 matches found
CVE-2022-31382
Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter in search-dirctory.php...
WordPress plugin Google Tag Manager 跨站脚本漏洞
WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin Google Tag Manager version 1.15 has a cross-site scripting vulnerability that stems from the fact that site searches are n...
PT-2022-14060
Name of the Vulnerable Software and Affected Versions Google Tag Manager for WordPress plugin for WordPress versions up to and including 1.15 Description The issue is related to reflected Cross-Site Scripting via the s parameter, which is caused by insufficient sanitization in the site search...
CVE-2022-32016
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bycompany...
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar SQL注入漏洞
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar an e-commerce project. ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0 is vulnerable to SQL injection, which stems from The keyword parameter of the searchproduct.php page lacks validation for external input SQL statements. An...
Online Food Ordering System SQL Injection Vulnerability
Online Food Ordering System is an online food ordering system designed primarily for use in the food delivery industry.Online Food Ordering System version 1.0 is vulnerable to a SQL injection vulnerability in the /online-food-order/food-search.php search parameter in...
CVE-2022-29650
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php...
CVE-2022-29650
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php...
Sql injection
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php...
Online Food Ordering System SQL注入漏洞
Online Food Ordering System is an online food ordering system designed primarily for use in the food delivery industry.Online Food Ordering System version 1.0 is vulnerable to a SQL injection vulnerability in the /online-food-order/food-search.php search parameter in...
GHSA-WG4M-VVP6-2HC5 SilverStripe vulnerable to Cross-site Scripting
Multiple cross-site scripting XSS vulnerabilities in SilverStripe before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via 1 the CommenterURL parameter to PostCommentForm, and in the Forum module before 0.2.5 in SilverStripe before 2.3.5 allow remote attackers to inject...
CVE-2021-43009
A Cross Site Scripting XSS vulnerability exists in OpServices OpMon through 9.11 via the search parameter in the request URL...
CVE-2021-43009
A Cross Site Scripting XSS vulnerability exists in OpServices OpMon through 9.11 via the search parameter in the request URL...
Cross site scripting
A Cross Site Scripting XSS vulnerability exists in OpServices OpMon through 9.11 via the search parameter in the request URL...
CVE-2021-43009
A Cross Site Scripting XSS vulnerability exists in OpServices OpMon through 9.11 via the search parameter in the request URL...
DEBIAN-CVE-2022-27920
libkiwix 10.0.0 and 10.0.1 allows XSS in the built-in webserver functionality via the search suggestions URL parameter. This is fixed in 10.1.0...
MingSoft Mcms SQL Injection Vulnerability (CNVD-2022-18535)
MingSoft Mcms is China's MingFei MingSoft company's a complete open source J2ee system . A security vulnerability exists in MingSoft Mcms v5.2.4 that allows attackers to conduct SQL injection attacks via the search.do parameter in the file /mdiy/dict/listExcludeApp. No details of the vulnerabilit...
CVE-2022-25395
Cosmetics and Beauty Product Online Store v1.0 was discovered to contain multiple reflected cross-site scripting XSS attacks via the search parameter under the /cbpos/ app...