PT-2018-14834

Name of the Vulnerable Software and Affected Versions S-CMS version 1.5 Description An issue was discovered in the software, which is related to a security problem. The problem is an XSS issue in the "search.php" file via the keyword parameter. Recommendations For S-CMS version 1.5, consider...

Sql injection

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php...

Sql injection

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie...

CVE-2018-18785

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php...

CVE-2018-18791

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie...

CVE-2018-18791: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie...

CVE-2018-18785: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php...

PT-2018-14649

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue exists in zzcms where SQL Injection is possible. This occurs in the zs/subzs.php file when a zzcmscpid cookie is used to access the zs/search.php endpoint. Recommendations For zzcms version 8.3, consider...

PT-2018-14655

Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description An issue exists in zzcms where SQL Injection is possible. This occurs in the zs/search.php file through the pxzs cookie. Recommendations For zzcms version 8.3, consider restricting access to the zs/search.php file...

Code injection

An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during "if" processing...

CVE-2018-18083

An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during "if" processing...

CVE-2018-18083

CVE-2018-18083 affects DuomiCMS 3.0. Affected component: search.php, where the parameter searchword is processed and unsafely uses eval during if processing, enabling remote PHP code execution. This yields high/severe impact (NVD CVSS3: 9.8, CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Exploit...

CVE-2018-18083: Improper Control of Generation of Code

An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during "if" processing...

PT-2018-14338

Name of the Vulnerable Software and Affected Versions DuomiCMS version 3.0 Description An issue in DuomiCMS allows remote PHP code execution via the searchword parameter in the "search.php" endpoint. This is possible because the eval function is used during "if" processing. Recommendations For...

onlinenigeria.com XSS vulnerability

Open Bug Bounty ID: OBB-678753 Description| Value ---|--- Affected Website:| onlinenigeria.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

newbethelgarner.org XSS vulnerability

Open Bug Bounty ID: OBB-678338 Description| Value ---|--- Affected Website:| newbethelgarner.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

klub31.ru XSS vulnerability

Open Bug Bounty ID: OBB-678050 Description| Value ---|--- Affected Website:| klub31.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

biltmorecofc.org XSS vulnerability

Open Bug Bounty ID: OBB-677190 Description| Value ---|--- Affected Website:| biltmorecofc.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jspresby.org XSS vulnerability

Open Bug Bounty ID: OBB-675021 Description| Value ---|--- Affected Website:| jspresby.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

backingtrackx.com XSS vulnerability

Open Bug Bounty ID: OBB-673921 Description| Value ---|--- Affected Website:| backingtrackx.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...