686 matches found
CVE-2022-41473
RPCMS 3.0.2 contains a reflected Cross-Site Scripting (XSS) vulnerability in the Search function. An attacker can inject arbitrary script in the victim’s browser, potentially stealing cookie-based credentials and enabling additional browser-based attacks. Affected product: RPCMS 3.0.2; vulnerabil...
Cross site scripting
SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting XSS vulnerability via the Search function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search bar...
CVE-2022-38291: Improper Neutralization of Input During Web Page Generation
SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting XSS vulnerability via the Search function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search bar...
CVE-2022-32297
Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...
CVE-2022-32297
Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...
Sql injection
Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...
CVE-2022-32297
CVE-2022-32297 affects Piwigo v12.2.0 and earlier, where the SQL injection vulnerability is triggered via the Search function. The OpenVAS/Red Hat/CVE entries corroborate a web-facing SQLi issue in Piwigo’s search path, with the root cause described as injectable payloads impacting the database. ...
CVE-2022-32297
Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...
CVE-2022-32297: Improper Neutralization of Special Elements used in an SQL Command
Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...
Piwigo SQL注入漏洞
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A security vulnerability exists in Piwigo v12.2.0 and earlier versions. The vulnerability stems from the fact that an attacker can use...
PT-2022-21214
Name of the Vulnerable Software and Affected Versions Piwigo version 12.2.0 Description The issue is related to a SQL injection vulnerability via the Search function. Recommendations For Piwigo version 12.2.0, at the moment, there is no information about a newer version that contains a fix for th...
PT-2022-13914
Name of the Vulnerable Software and Affected Versions WP Event Manager versions prior to 3.1.28 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the search function in the WP Event Manager plugin does not properly sanitise and escape its output, whic...
PT-2022-31818
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description A bug was fixed in the ext4 file system, specifically in the es tree search function. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For...
CVE-2022-31478
The UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the search function...
ILIAS plugin UserTakeOver 安全漏洞
ILIAS is an open source learning management system. A security vulnerability exists in the ILIAS plugin UserTakeOver versions prior to 4.0.1. An attacker exploited the vulnerability to list all users via the search function...
CVE-2022-31478: Undefined Security Weakness
The UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the search function...
Cross-site Scripting (XSS) - Reflected
Description I find Relected XSS in search function. Proof of Concept 1.Login with admin or teacher account 2.Access this url:...
Cross-site Scripting (XSS) in Search Fuction with filter
Description The is an XSS could be trigger via search function in number filter. Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of...
WDJA SQL Injection Vulnerability
Wdja is a Php-based content management system from the WDJA team. v2.1 of WDJA is vulnerable to SQL injection, which stems from the impact of a SQL injection vulnerability in the front-end search function. An attacker can exploit the vulnerability for SQL injection...