2340 matches found
CVE-2006-0450-phpBB-2.0.15-Multiple-DoS-Vulnerabilities
Neo Security Team NST® - Advisory 15 - 00/00/06 Program: phpBB 2.0.15 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.15 & Lower versions Risk: High Risk!! Impact: Multiple DoS Vulnerabilities. Description phpBB is a high powered, fully scalable, and highly customizable Open Source...
CVE-2021-32305-websvn-2.6.0
CVE-2021-3205-websvn-2.6.0 This is a exploit of CVE-2021-3205 a web vulnerability to command injection on search.php path, this exploit allows execute commands. Requirements optparse, signal, requests Usage ❯ python3 CVE-2021-3205.py --url http://10.0.2.168/websvn/ --payload "bash -c 'bash -i &...
CVE-2025-61454
🛡️ CVE Disclosure: CVE-2025-61454 — Reflected XSS in E-commerce Project Disclosure Date: 14 October 2025 CVE ID: CVE-2025-61454 Severity: MEDIUM CVSS 6.1 🧩 Summary A reflected Cross-Site Scripting XSS vulnerability exists in the E-commerce Project v1.0, specifically within the search.php endpoint...
CVE-2026-114407
e107 CMS before 2.3.13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious HTML by manipulating the author GET parameter in search.php, which is parsed with parsestr and concatenated unescaped into a rendered input tag via the form...
CVE-2026-114407
The e107 CMS before version 2.3.13 is vulnerable to a reflected cross-site scripting (XSS) flaw. The issue resides in search.php when the author GET parameter is processed using parse_str(). Because the data is concatenated unescaped into a rendered input tag via the form handler's 'other' option...
EUVD-2026-107215
e107 CMS before 2.3.13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious HTML by manipulating the author GET parameter in search.php, which is parsed with parsestr and concatenated unescaped into a rendered input tag via the form...
CVE-2026-114407 e107 CMS before 2.3.13 Reflected XSS via search.php author Parameter
e107 CMS before 2.3.13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious HTML by manipulating the author GET parameter in search.php, which is parsed with parsestr and concatenated unescaped into a rendered input tag via the form...
CVE-2026-114407 e107 CMS before 2.3.13 Reflected XSS via search.php author Parameter
e107 CMS before 2.3.13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious HTML by manipulating the author GET parameter in search.php, which is parsed with parsestr and concatenated unescaped into a rendered input tag via the form...
CVE-2026-114407 e107 CMS before 2.3.13 Reflected XSS via search.php author Parameter
e107 CMS before 2.3.13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious HTML by manipulating the author GET parameter in search.php, which is parsed with parsestr and concatenated unescaped into a rendered input tag via the form...
PT-2026-120437
A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is the function mysqli query of the file report search.php. Executing a manipulation of the argument dateto/datefrom can lead to sql injection. The attack can be executed remotely. The exploit has bee...
PT-2026-120555
e107 CMS before 2.3.13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious HTML by manipulating the author GET parameter in search.php, which is parsed with parse str and concatenated unescaped into a rendered input tag via the form...
CVE-2026-112150
A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of the file search.php. The manipulation of the argument Search results in sql injection. The attack can be executed remotely. The exploit has...
CVE-2026-112150 vraj404 Criminal-Management-System search.php sql injection
A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of the file search.php. The manipulation of the argument Search results in sql injection. The attack can be executed remotely. The exploit has...
EUVD-2026-104387
A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of the file search.php. The manipulation of the argument Search results in sql injection. The attack can be executed remotely. The exploit has...
CVE-2026-112150
The vraj404 Criminal-Management-System (up to commit 2808d057e7ddc5295519a487365b0cacfd0ba8c4 ) is vulnerable to a remote SQL injection flaw. The vulnerability exists within an unknown function of the search.php file, where manipulating the Search argument allows an attacker to execute arbitrary ...
CVE-2026-112150 vraj404 Criminal-Management-System search.php sql injection
A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of the file search.php. The manipulation of the argument Search results in sql injection. The attack can be executed remotely. The exploit has...
CVE-2026-112150: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of the file search.php. The manipulation of the argument Search results in sql injection. The attack can be executed remotely. The exploit has...
CVE-2026-111877
A vulnerability was determined in dext34-morgan Books4Cash up to a8d3e357db75c07ac5ffbadcbaee2aeb4db3e571. This affects an unknown part of the file search.php. Executing a manipulation of the argument Search can lead to cross site scripting. The attack may be performed from remote. The exploit ha...
CVE-2026-111877
The dext34-morgan Books4Cash application (up to commit a8d3e357db75c07ac5ffbadcbaee2aeb4db3e571 ) is vulnerable to Cross-Site Scripting (XSS) . The flaw exists in an unspecified part of the search.php file, where a remote attacker can manipulate the Search argument to execute malicious scripts. T...
EUVD-2026-103388
A vulnerability was determined in dext34-morgan Books4Cash up to a8d3e357db75c07ac5ffbadcbaee2aeb4db3e571. This affects an unknown part of the file search.php. Executing a manipulation of the argument Search can lead to cross site scripting. The attack may be performed from remote. The exploit ha...