54 matches found
CVE-2017-20266
Joomla SP Movie Database 1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the searchword parameter. Attackers can send GET requests to the searchresults view with crafted SQL payloads in the...
EUVD-2017-18993
Joomla SP Movie Database 1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the searchword parameter. Attackers can send GET requests to the searchresults view with crafted SQL payloads in the...
CVE-2017-20266
CVE-2017-20266 affects Joomla SP Movie Database 1.3. The issue is an SQL injection in the searchword parameter of the searchresults view, enabling unauthenticated attackers to execute arbitrary SQL queries and extract sensitive database information via crafted GET requests. No remediation or expl...
CVE-2017-20266 Joomla SP Movie Database 1.3 SQL Injection via searchword
Joomla SP Movie Database 1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the searchword parameter. Attackers can send GET requests to the searchresults view with crafted SQL payloads in the...
PT-2026-50943
Name of the Vulnerable Software and Affected Versions Joomla SP Movie Database version 1.3 Description An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries. This is achieved by injecting malicious code into the searchword parameter when sending GET requests to the...
CVE-2025-15053
A flaw has been found in code-projects Student Information System 1.0. This issue affects some unknown processing of the file /searchresults.php. Executing manipulation of the argument searchbox can lead to sql injection. The attack may be performed from remote. The exploit has been published and...
CVE-2025-15053 code-projects Student Information System searchresults.php sql injection
A flaw has been found in code-projects Student Information System 1.0. This issue affects some unknown processing of the file /searchresults.php. Executing manipulation of the argument searchbox can lead to sql injection. The attack may be performed from remote. The exploit has been published and...
PT-2025-52867
Name of the Vulnerable Software and Affected Versions code-projects Student Information System version 1.0 Description A flaw exists in the processing of the /searchresults.php file within the software. Manipulation of the searchbox argument can lead to SQL injection. The attack can be performed...
EUVD-2016-2084
Malware in sbrugna...
CVE-2016-15013
A vulnerability was found in ForumHulp searchresults. It has been rated as critical. Affected by this issue is the function listkeywords of the file event/listener.php. The manipulation of the argument word leads to sql injection. The name of the patch is dd8a312bb285ad9735a8e1da58e9e955837b7322...
CVE-2016-15013
A vulnerability was found in ForumHulp searchresults. It has been rated as critical. Affected by this issue is the function listkeywords of the file event/listener.php. The manipulation of the argument word leads to sql injection. The name of the patch is dd8a312bb285ad9735a8e1da58e9e955837b7322...
Sql injection
A vulnerability was found in ForumHulp searchresults. It has been rated as critical. Affected by this issue is the function listkeywords of the file event/listener.php. The manipulation of the argument word leads to sql injection. The name of the patch is dd8a312bb285ad9735a8e1da58e9e955837b7322...
CVE-2016-15013 ForumHulp searchresults listener.php list_keywords sql injection
A vulnerability was found in ForumHulp searchresults. It has been rated as critical. Affected by this issue is the function listkeywords of the file event/listener.php. The manipulation of the argument word leads to sql injection. The name of the patch is dd8a312bb285ad9735a8e1da58e9e955837b7322...
CVE-2016-15013
CVE-2016-15013 affects ForumHulp searchresults, specifically the list_keywords function in event/listener.php. The vulnerability arises from accepting and manipulating the word parameter, enabling SQL injection. A patch is identified by the commit hash dd8a312bb285ad9735a8e1da58e9e955837b7322, an...
All Vulnerabilities for propertytax.chattanooga.gov Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| propertytax.chattanooga.gov ---|--- Ope...
omahazoo.sitewrench.com XSS vulnerability
Open Bug Bounty ID: OBB-665139 Description| Value ---|--- Affected Website:| omahazoo.sitewrench.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
townofsaltcoats.ca XSS vulnerability
Open Bug Bounty ID: OBB-598907 Description| Value ---|--- Affected Website:| townofsaltcoats.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
verbraucherauskunft.de XSS vulnerability
Vulnerable URL: http://www.verbraucherauskunft.de/pdshop/estorefiles/searchresults.php?SearchTerm="/ =ItemName&ord1;=ItemName&ord2;=asc&search1.x;=21&search1.y;=9 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:|...
kellyservices.co.id XSS vulnerability
Vulnerable URL: http://www.kellyservices.co.id/templates/pages/SearchResults.aspx?searchtext=alert'BUGBOUNTY'...
pro-physik.de XSS vulnerability
Vulnerable URL: http://www.pro-physik.de/view/searchresults.html?filter1=pj&filter2;==%22%2F%3E%27%3E%22%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E=true Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.08.2017 Vulnerability type:| XSS Vulnerability...