2344 matches found
PT-2020-7179
Name of the Vulnerable Software and Affected Versions phxEventManager version 2.0 beta 5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the search terms parameter in the "search.php" file. Recommendations For phxEventManager version 2.0 beta ...
CVE-2012-1124: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL commands via the searchterms parameter...
PT-2019-15820
Name of the Vulnerable Software and Affected Versions FusionPBX version 4.4.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the redirect parameter in the /app/xml cdr/xml cdr search.php API endpoint. Recommendations For FusionPBX versi...
CVE-2017-18364
phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter...
CVE-2017-18364
CVE-2017-18364 concerns phpFK lite and is a reflected cross-site scripting (XSS) vulnerability. The affected components are the web interface files faq.php, members.php, search.php (via query strings) and user.php (via the user parameter). The underlying issue is that user-supplied input in these...
PT-2019-8301
Name of the Vulnerable Software and Affected Versions phpFK lite affected versions not specified Description The issue concerns an XSS vulnerability. It can be exploited via the query string in faq.php, members.php, or search.php, or through the user parameter in user.php. Recommendations At the...
CVE-2017-18364: Improper Neutralization of Input During Web Page Generation
phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter...
LayerBB SQL Injection Vulnerability
LayerBB is a small set of forum software. A SQL injection vulnerability exists in LayerBB version 1.1.1. A remote attacker can exploit this vulnerability by sending the 'searchquery' parameter to the search.php file to execute SQL commands...
CVE-2018-17988
LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...
CVE-2018-17988
LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...
Sql injection
LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...
CVE-2018-17988
LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...
CVE-2018-17988
LayerBB is affected: versions 1.1.1 and 1.1.3 expose an SQL Injection in the search.phpFile through the search_query parameter. The root cause is an injectable parameter in the search functionality, allowing an attacker to manipulate SQL commands. The CVE entry (CVE-2018-17988) lists this as a hi...
CVE-2018-17988: Improper Neutralization of Special Elements used in an SQL Command
LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...
PT-2019-9538
Name of the Vulnerable Software and Affected Versions LayerBB versions 1.1.1 through 1.1.3 Description The issue is related to SQL Injection via the "search.php" API endpoint, specifically through the search query parameter. This allows for potential exploitation. Recommendations For versions 1.1...
CMSsite 1.0 - search SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: CMSsite 1.0 - 'search' SQL injection Exploit Author : Majid kalantari email protected Vendor Homepage : https://github.com/VictorAlagwu/CMSsite Software link: https://github.com/VictorAlagwu/CMSsite/archive/master.zip Version: 1...
PT-2019-9804
Name of the Vulnerable Software and Affected Versions Plikli CMS version 4.0.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters in various PHP files. The...
CVE-2018-19414: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 keyword parameter to groups.php; 2 username parameter to login.php; or 3 date parameter to search.php...