PT-2019-8301

Name of the Vulnerable Software and Affected Versions phpFK lite affected versions not specified Description The issue concerns an XSS vulnerability. It can be exploited via the query string in faq.php, members.php, or search.php, or through the user parameter in user.php. Recommendations At the...

LayerBB SQL Injection Vulnerability

LayerBB is a small set of forum software. A SQL injection vulnerability exists in LayerBB version 1.1.1. A remote attacker can exploit this vulnerability by sending the 'searchquery' parameter to the search.php file to execute SQL commands...

CVE-2018-17988

LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...

CVE-2018-17988

LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...

Sql injection

LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...

CVE-2018-17988

LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...

CVE-2018-17988

LayerBB is affected: versions 1.1.1 and 1.1.3 expose an SQL Injection in the search.phpFile through the search_query parameter. The root cause is an injectable parameter in the search functionality, allowing an attacker to manipulate SQL commands. The CVE entry (CVE-2018-17988) lists this as a hi...

CVE-2018-17988: Improper Neutralization of Special Elements used in an SQL Command

LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...

PT-2019-9538

Name of the Vulnerable Software and Affected Versions LayerBB versions 1.1.1 through 1.1.3 Description The issue is related to SQL Injection via the "search.php" API endpoint, specifically through the search query parameter. This allows for potential exploitation. Recommendations For versions 1.1...

CMSsite 1.0 - search SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: CMSsite 1.0 - 'search' SQL injection Exploit Author : Majid kalantari email protected Vendor Homepage : https://github.com/VictorAlagwu/CMSsite Software link: https://github.com/VictorAlagwu/CMSsite/archive/master.zip Version: 1...

CVE-2018-19414: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 keyword parameter to groups.php; 2 username parameter to login.php; or 3 date parameter to search.php...

PT-2019-9804

Name of the Vulnerable Software and Affected Versions Plikli CMS version 4.0.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters in various PHP files. The...

CVE-2018-19331

An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...

CVE-2018-19331

An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...

CVE-2018-19331: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...

PT-2018-14920

Name of the Vulnerable Software and Affected Versions S-CMS version 1.5 Description A SQL injection issue was found in the search functionality. The vulnerability can be exploited through the keyword parameter in the "search.php" endpoint. Recommendations For S-CMS version 1.5, avoid using the...

Cross site scripting

An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...

CVE-2018-19145

An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...

CVE-2018-19145

This CVE concerns S-CMS v1.5 and an XSS vulnerability in search.php reachable via the keyword parameter. The issue is triggered through input handling in the search routine, allowing injection of web scripts or HTML. The core information confirms the vulnerability exists in the S-CMS 1.5 componen...

CVE-2018-19145: Improper Neutralization of Input During Web Page Generation

An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...