11 matches found
CVE-2025-15492 RainyGao DocSys GroupMemberMapper.xml sql injection
A vulnerability was detected in RainyGao DocSys up to 2.02.36. The affected element is an unknown function of the file src/com/DocSystem/mapping/GroupMemberMapper.xml. Performing a manipulation of the argument searchWord results in sql injection. It is possible to initiate the attack remotely. Th...
CVE-2022-24264
Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the searchword parameter...
SUSE CVE-2008-7271
Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via 1 the searchWord parameter to help/advanced/searchView.jsp or 2 the workingSet parameter in ...
CVE-2022-24264
Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the searchword parameter...
PT-2022-16574
Name of the Vulnerable Software and Affected Versions Cuppa CMS version 1.0 Description A SQL injection issue was found in the /administrator/components/table manager/ endpoint via the search word parameter. This allows for potential exploitation of the system. Recommendations For Cuppa CMS versi...
CVE-2011-3595
Multiple Cross-site Scripting XSS vulnerabilities exist in Joomla! through 1.7.0 in index.php in the search word, extension, asset, and author parameters...
CVE-2011-3595
CVE-2011-3595 involves multiple Cross-site Scripting (XSS) vulnerabilities in Joomla! up to version 1.7.0. The issue resides in index.php, within the search word, extension, asset, and author parameters, enabling XSS in affected requests. The provided documents confirm the affected software versi...
PT-2020-7120
Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.7.0 Description Multiple Cross-site Scripting XSS vulnerabilities exist in the index.php file, specifically in the search word, extension, asset, and author parameters. This issue allows for potential exploitation...
CVE-2011-3595: Improper Neutralization of Input During Web Page Generation
Multiple Cross-site Scripting XSS vulnerabilities exist in Joomla! through 1.7.0 in index.php in the search word, extension, asset, and author parameters...
CVE-2010-4976
Cross-site scripting XSS vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter aka Search Box field. NOTE: some of these details are obtained from third party information...
Blue corporate web site management system English fan version V1. 0 vulnerability-vulnerability warning-the black bar safety net
Blue corporate web site management system English fan version V1. 0 vulnerability this program- - how to look like the w78 program Background image- - even the search word search out of Also the same - but the file names are different. - - Nothing- -ewebeditor 5.5 upload vulnerability form...