65 matches found
Ifsc Code Finder Project SQL注入漏洞
Ifsc Code Finder Project is a web based application by Anuj Kumar Personal Developer. It is used to help users find Ifsc codes of any bank immediately. IFSC Code Finder Project suffers from a SQL injection vulnerability that originates in IFSC Code Finder Project 1.0 via the searchifsccode POST...
CVE-2020-18917
The plus/search.php component in DedeCMS 5.7 SP2 allows remote attackers to execute arbitrary PHP code via the typename parameter because the contents of typename.inc are under an attacker's control...
CVE-2021-26224
Cross-site scripting XSS vulnerability in SourceCodester Fantastic-Blog-CMS V 1.0 allows remote attackers to inject arbitrary web script or HTML via the search field to search.php...
Online Marriage Registration System SQL Injection Vulnerability
Online Marriage Registration System is a website builder that supports online marriage registration. A SQL injection vulnerability exists in Online Marriage Registration System version 1.0, which stems from a lack of validation of the searchdata parameter of the search.php request against an...
Cxuucms SQL注入漏洞
Cxuucms is a PHP-based content relationship building system. cxuucms v3 suffers from a SQL injection vulnerability that originates from leaking all database data via search.php via the keyword parameter. No detailed vulnerability details are available at this time...
CVE-2018-19331
An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...
S-CMS Cross-Site Scripting Vulnerability
S-CMS is a content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in the search.php file in S-CMS version 1.5, which can be exploited by remote attackers to inject arbitrary Web script or HTML with the help of the 'keyword' parameter...
CVE-2018-19145
An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...
CVE-2018-18791
An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie...
CVE-2018-18785
An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php...
CVE-2018-5986
SQL Injection exists in Easy Car Script 2014 via the sorder or srow parameter to sitesearch.php...
alarmassismicas.mexicored.com.mx XSS vulnerability
Open Bug Bounty ID: OBB-483554 Description| Value ---|--- Affected Website:| alarmassismicas.mexicored.com.mx Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinat...
FS Ebay Clone SQL Injection Vulnerability
FS Ebay Clone is an online auction and shopping website script based on PHP and MySQL. A SQL injection vulnerability exists in FS Ebay Clone version 1.0. A remote attacker can inject SQL into the product.php file by sending the 'id' parameter to the product.php file, or the search.php file by...
orthodontics.nl XSS vulnerability
Open Bug Bounty ID: OBB-261539 Description| Value ---|--- Affected Website:| orthodontics.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
imdbphp cross-site scripting vulnerability
imdbphp is a PHP library for retrieving movie and TV information from IMDb. A cross-site scripting vulnerability exists in imdbphp version 5.1.1, which stems from the imdbphp-master/demo/search.php URL failing to adequately filter the name parameter, and can be exploited by remote attackers to...
CVE-2010-4976
Cross-site scripting XSS vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter aka Search Box field. NOTE: some of these details are obtained from third party information...
CVE-2010-2040
Cross-site scripting XSS vulnerability in search.php in V-EVA Shopzilla Affiliate Script PHP allows remote attackers to inject arbitrary web script or HTML via the s parameter...
DEBIAN-CVE-2008-6838
Cross-site scripting XSS vulnerability in search.php in Zoph 0.7.2.1 allows remote attackers to inject arbitrary web script or HTML via the off parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2009-0327: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in readbible.php in Free Bible Search PHP Script 1.0 allows remote attackers to execute arbitrary SQL commands via the version parameter...
Free Bible Search PHP Script - SQL Injection
Free Bible Search PHP Script - SQL Injection Free Bible Search PHP Script readbible.php SQL Injection Vulnerability Author: nuclear site: http://www.seraphimtech.net/?q=node/6 vuln: http://localhost/path/readbible.php?version=kjv%20union%20select%20@@version-- demo:...