EUVD-2011-5098

Malware in sbrugna...

EUVD-2008-3327

Malware in sbrugna...

EUVD-2008-2769

Malware in sbrugna...

CVE-2025-10448: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Campcodes Online Job Finder System 1.0. This affects an unknown function of the file /index.php?q=result&searchfor=bycompany. This manipulation of the argument Search causes sql injection. The attack can be initiated remotely. The exploit has been published and may be use...

PT-2022-21042

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the /eris/index.php?q=result&searchfor=byfunction endpoint. The searchfor parameter is vulnerable, specifically when set to...

PT-2022-21045

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the /eris/index.php?q=result&searchfor=bytitle API endpoint. The searchfor parameter, specifically when set to bytitle, is...

PT-2022-21044

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue concerns SQL Injection vulnerability. It can be exploited via the "/eris/index.php?q=result&searchfor=bycompany" API endpoint, specifically through the searchfor variable. No...

CVE-2022-32014: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=byfunction...

CVE-2022-32016: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bycompany...

PT-2022-19534

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the /eris/index.php?q=result&searchfor=advancesearch endpoint, specifically through the...

Unfixed XSS vulnerability at www.mlowreyengraving.com

Security researcher Atmon3r, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting www.mlowreyengraving.com, which at the time of submission ranked 16150353 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It...

Sql injection

SQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the SearchFor parameter. NOTE: some of these details are obtained from third party information...

CVE-2011-5198

SQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the SearchFor parameter. NOTE: some of these details are obtained from third party information...

CVE-2011-5198

CVE-2011-5198 is a confirmed SQL injection in the Neturf eCommerce Shopping Cart, targeting the search.php endpoint. The vulnerability allows remote attackers to append arbitrary SQL via the SearchFor parameter (no authentication required, network access). CVSS v2 metrics indicate a base score of...

PT-2012-2175

Name of the Vulnerable Software and Affected Versions Neturf eCommerce Shopping Cart affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the SearchFor parameter in the "search.php" file. Recommendations At the momen...

CVE-2011-5198: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the SearchFor parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-3340

Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...

CVE-2008-3340: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...

Sql injection

SQL injection vulnerability in search.asp in DT Centrepiece 4.0 allows remote attackers to execute arbitrary SQL commands via the searchFor parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...