PT-2026-96227

Name of the Vulnerable Software and Affected Versions Tautulli versions prior to 2.17.2 Description The /search endpoint inserts a user-controlled query parameter into a JavaScript string within the data/interfaces/default/search.html file. The application uses manual escaping that fails to handl...

CVE-2025-12248

A security vulnerability has been detected in CLTPHP 3.0. The affected element is an unknown function of the file /home/search.html. Such manipulation of the argument keyword leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

CVE-2025-12248 CLTPHP search.html sql injection

A security vulnerability has been detected in CLTPHP 3.0. The affected element is an unknown function of the file /home/search.html. Such manipulation of the argument keyword leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

CVE-2025-12248: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in CLTPHP 3.0. The affected element is an unknown function of the file /home/search.html. Such manipulation of the argument keyword leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

EQDKP Plus CMS 2.3.29 Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Reflected Cross-Site Scripting XSS Vulnerability product: EQDKP Plus CMS vulnerable version: = 2.3.29 fixed version: 2.3.30 CVE number: - impact: Low homepage:...

EQDKP Plus CMS 2.3.29 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ======================================================================= title: Reflected Cross-Site Scripting XSS Vulnerability product: EQDKP Plus CMS vulnerable version: = 2.3.29 fixed version: 2.3.30 CVE number: - impact: Low homepage:...

Design/Logic Flaw

An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter...

CVE-2018-19849

CVE-2018-19849 concerns YzmCMS 5.2 where an XSS vulnerability exists in the admin/content/search.html page via the searinfo parameter. The issue arises from unsanitized input in that parameter, enabling script/HTML injection. Exploitation details are not provided in the connected documents; no pa...

CVE-2018-19849

An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter...

PT-2018-15128

Name of the Vulnerable Software and Affected Versions YzmCMS version 5.2 Description An issue exists in the software where XSS is possible via the searinfo parameter in the "admin/content/search.html" endpoint. Recommendations For YzmCMS version 5.2, consider restricting access to the searinfo...

CVE-2018-19849: Improper Neutralization of Input During Web Page Generation

An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter...

board24.lg.ua XSS vulnerability

Open Bug Bounty ID: OBB-679661 Description| Value ---|--- Affected Website:| board24.lg.ua Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kj.de XSS vulnerability

Open Bug Bounty ID: OBB-677993 Description| Value ---|--- Affected Website:| kj.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bestebazaar.com XSS vulnerability

Open Bug Bounty ID: OBB-676702 Description| Value ---|--- Affected Website:| bestebazaar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

andro-news.com XSS vulnerability

Open Bug Bounty ID: OBB-668643 Description| Value ---|--- Affected Website:| andro-news.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

med-health.net XSS vulnerability

Open Bug Bounty ID: OBB-624817 Description| Value ---|--- Affected Website:| med-health.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

speakersfunstore.com XSS vulnerability

Open Bug Bounty ID: OBB-599978 Description| Value ---|--- Affected Website:| speakersfunstore.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

roda2.com XSS vulnerability

Open Bug Bounty ID: OBB-576612 Description| Value ---|--- Affected Website:| roda2.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kuansing.go.id XSS vulnerability

Open Bug Bounty ID: OBB-566628 Description| Value ---|--- Affected Website:| kuansing.go.id Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

camilleriparismode.com XSS vulnerability

Open Bug Bounty ID: OBB-551826 Description| Value ---|--- Affected Website:| camilleriparismode.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...