52 matches found
CVE-2019-9207
CVE-2019-9207 affects PRTG Network Monitor 7.1.3.3378 . The vulnerability is an XSS flaw exploitable via the /search.htm endpoint using the searchtext parameter. Public records consistently describe a cross-site scripting vulnerability in this version; the product is noted as discontinued. The co...
CVE-2019-9207
PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter. NOTE: This product is discontinued...
The vulnerability of the eDocLib platform for storing and processing corporate data arises from the lack of measures taken to protect the website structure. This vulnerability allows attackers to carry out cross-site scripting attacks.
The vulnerability of the eDocLib platform for storing and processing corporate data exists due to the lack of measures taken to protect the structure of its web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the user’s browser by placing it in a speciall...
Code injection
An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SolutionSearch.do searchText parameter...
Paessler AG PRTG Network Monitor Cross-Site Scripting Vulnerability
Paessler AG PRTG Network Monitor is a full-featured network monitoring and management software from Paessler AG, Germany. A cross-site scripting vulnerability exists in Paessler AG PRTG Network Monitor version 7.1.3.3378, which can be exploited by a remote attacker to inject arbitrary web script ...
Paessler AG PRTG Network Monitor Cross-Site Scripting Vulnerability
Paessler AG PRTG Network Monitor is a full-featured network monitoring and management software from Paessler AG, Germany. A cross-site scripting vulnerability exists in Paessler AG PRTG Network Monitor version 7.1.3.3378. The vulnerability can be exploited by a remote attacker to inject arbitrary...
CVE-2018-7313
SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter...
Sql injection
SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter...
CVE-2018-7313
SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter...
CVE-2018-7313
SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter...
CVE-2017-17603
Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, projtype, searchtext, sellprice, or maxprice parameter...
CVE-2017-17603
Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, projtype, searchtext, sellprice, or maxprice parameter...
Sql injection
Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, projtype, searchtext, sellprice, or maxprice parameter...
Joomla! Component BookLibrary 3.6.1 - SQL Injection
Exploit Title: Joomla! Component BookLibrary v3.6.1 - SQL Injection Google Dork: inurl:index.php?option=combooklibrary Date: 22.02.2017 Vendor Homepage: http://ordasoft.com/ Software Buy: https://extensions.joomla.org/extensions/extension/living/education-a-culture/booklibrary-basic/ Demo:...
igup.urfu.ru XSS vulnerability
Vulnerable URL: http://igup.urfu.ru/index.php/article/search/?SearchText=testprompt/OPENBUGBOUNTY/...
cuzk.cz XSS vulnerability
Vulnerable URL: http://cuzk.cz/Nastaveni-webu/Vysledky-vyhledavani.aspx?searchtext=%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3C/script%3E=anyword Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...
CVE-2011-1510
Cross-site scripting XSS vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus SDP before 8012 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus SDP before 8012 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter...
CVE-2011-1510
Cross-site scripting XSS vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus SDP before 8012 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in Widgets.aspx in Blogsa 1.0 Beta 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchText parameter...