7 matches found
EUVD-2021-28129
Malicious code in bioql PyPI...
CVE-2024-6526
A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03. This affects an unknown part. The manipulation of the argument searchtitle/catName/sub/name/categorie leads to cross site scripting. It is possib...
CVE-2024-6526: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03. This affects an unknown part. The manipulation of the argument searchtitle/catName/sub/name/categorie leads to cross site scripting. It is possib...
CVE-2021-40975
Cross-site scripting XSS vulnerability in application/modules/admin/views/ecommerce/products.php in Ecommerce-CodeIgniter-Bootstrap Codeigniter 3.1.11, Bootstrap 3.3.7 allows remote attackers to inject arbitrary web script or HTML via the searchtitle parameter...
Ecommerce-CodeIgniter-Bootstrap Cross-Site Scripting Vulnerabilities
Ecommerce-CodeIgniter-Bootstrap is a responsive, multi-vendor, multi-language online store platform shopping cart solution. A cross-site scripting vulnerability in Ecommerce-CodeIgniter-Bootstrap Codeigniter 3.1.11, Bootstrap 3.3.7 allows remote attackers to inject arbitrary web script or HTML vi...
CVE-2021-40975: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in application/modules/admin/views/ecommerce/products.php in Ecommerce-CodeIgniter-Bootstrap Codeigniter 3.1.11, Bootstrap 3.3.7 allows remote attackers to inject arbitrary web script or HTML via the searchtitle parameter...
Tipask!2.0、1.4sql注入
简要描述: 之前也有人爆wps的sql注入,其实wps用的是这个系统 详细说明: 在control/question.php 的onajaxsearch函数中 function onajaxsearch $title = urldecode$this- get2; $questionlist = $ENV 'question'-searchtitle$title, 2, 1, 0, 5; include template'ajaxsearch' ; 由get2传入的参数经过了urldecode再进入到question模块中的searchtitle函数里。 //根据标题搜索问题...