CVE-2025-15492 RainyGao DocSys GroupMemberMapper.xml sql injection

A vulnerability was detected in RainyGao DocSys up to 2.02.36. The affected element is an unknown function of the file src/com/DocSystem/mapping/GroupMemberMapper.xml. Performing a manipulation of the argument searchWord results in sql injection. It is possible to initiate the attack remotely. Th...

CVE-2022-24264

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the searchword parameter...

SUSE CVE-2008-7271

Multiple cross-site scripting XSS vulnerabilities in the Help Contents web application aka the Help Server in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via 1 the searchWord parameter to help/advanced/searchView.jsp or 2 the workingSet parameter in ...

CVE-2022-24264

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the searchword parameter...

CVE-2011-3595

Multiple Cross-site Scripting XSS vulnerabilities exist in Joomla! through 1.7.0 in index.php in the search word, extension, asset, and author parameters...

CVE-2011-3595

CVE-2011-3595 involves multiple Cross-site Scripting (XSS) vulnerabilities in Joomla! up to version 1.7.0. The issue resides in index.php, within the search word, extension, asset, and author parameters, enabling XSS in affected requests. The provided documents confirm the affected software versi...

CVE-2011-3595: Improper Neutralization of Input During Web Page Generation

Multiple Cross-site Scripting XSS vulnerabilities exist in Joomla! through 1.7.0 in index.php in the search word, extension, asset, and author parameters...

CVE-2010-4976

Cross-site scripting XSS vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter aka Search Box field. NOTE: some of these details are obtained from third party information...

Blue corporate web site management system English fan version V1. 0 vulnerability-vulnerability warning-the black bar safety net

Blue corporate web site management system English fan version V1. 0 vulnerability this program- - how to look like the w78 program Background image- - even the search word search out of Also the same - but the file names are different. - - Nothing- -ewebeditor 5.5 upload vulnerability form...