2358 matches found
CVE-2021-28280
CSRF + Cross-site scripting XSS vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML...
CVE-2021-28280
CSRF + Cross-site scripting XSS vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML...
Cross site scripting
CSRF + Cross-site scripting XSS vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML...
CVE-2021-28280
CSRF + Cross-site scripting XSS vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML...
CVE-2021-28280: Improper Neutralization of Input During Web Page Generation
CSRF + Cross-site scripting XSS vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML...
PT-2021-17838
Name of the Vulnerable Software and Affected Versions: PHPFusion version 9.03.110 Description: The issue concerns a combination of CSRF and Cross-site scripting XSS vulnerability in the search.php file. This allows remote attackers to inject arbitrary web script or HTML, potentially leading to...
LayerBB 1.1.4 SQL Injection
Exploit Title: LayerBB 1.1.4 - 'searchquery' SQL Injection Date: 2021-02-19 Exploit Author: Görkem Haşin Version: 1.1.4 Tested on: Linux/Windows POST /search.php HTTP/1.1 Host: Target Payload: searchquery=Lffd' AND 8460=SELECT CASE WHEN 8460=8460 THEN 8460 ELSE SELECT 1560 UNION SELECT 2122 END--...
PT-2021-4000
Name of the Vulnerable Software and Affected Versions SourceCodester Fantastic-Blog-CMS version 1.0 Description The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the search field in the...
CVE-2020-35151
CVE-2020-35151 affects The Online Marriage Registration System 1.0. The vulnerability is a Time-Based SQL Injection in the post parameter searchdata of user/search.php (and noted in admin/search.php in the exploit). Root cause: lack of input validation for searchdata, enabling attacker-controlled...
CVE-2020-35151: Improper Neutralization of Special Elements used in an SQL Command
The Online Marriage Registration System 1.0 post parameter "searchdata" in the user/search.php request is vulnerable to Time Based Sql Injection...
Victor CMS SQL Injection Vulnerability (CNVD-2020-68864)
Victor CMS is a simple content management system. Victor CMS 1.0 suffers from a SQL injection vulnerability. The vulnerability can be exploited to conduct SQL injection attacks via the 'search' parameter on the search.php page...
CVE-2020-29280
The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page...
CVE-2020-29280
The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page...
Sql injection
The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page...
Victor CMS SQL injection vulnerability
Victor CMS is a simple content management system. Victor CMS 1.0 suffers from a SQL injection vulnerability. The vulnerability can be exploited to conduct SQL injection attacks via the 'search' parameter on the search.php page...
CVE-2020-29280: Improper Neutralization of Special Elements used in an SQL Command
The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page...
PT-2020-17130
Name of the Vulnerable Software and Affected Versions Victor CMS version 1.0 Description The issue concerns SQL injection via the search parameter on the "search.php" page. This allows for potential exploitation of the application's database. No information is provided about the estimated number ...
xuucms 3 SQL Injection
Exploit Title: xuucms 3 - 'keywords' SQL Injection Date: 2020-11-18 Exploit Author: icekam Vendor Homepage: https://www.cxuu.top/ Software Link: https://github.com/cbkhwx/cxuucmsv3 Version: cxuucms - v3 CVE : CVE-2020-28091 SQL injection exists in search.php. For details, please refer to:...
