12 matches found
EUVD-2021-0880
Malware in sbrugna...
EUVD-2015-0905
Malware in sbrugna...
EUVD-2023-1081
Malicious code in bioql PyPI...
EUVD-2022-5032
Malicious code in bioql PyPI...
WordPress External Media Upload Plugin <= 0.3 is vulnerable to Cross Site Scripting (XSS)
Software External Media Upload Type Plugin Vulnerable versions = 0.3 Fixed in 0.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 69ec8e1f8b63 Credits Rafie Muhammad Patchstack Required...
SQL Injection Vulnerability in LJCMS (CNVD-2021-10525)
LJCMS is a free and open source content management system. LJCMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about the database...
CVE-2020-15011
GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page...
TinyShop修复不当再次注入（全版本）
简要描述： 在修复http://www.wooyun.org/bugs/wooyun-2014-068153漏洞时候，处理不当，治标不治本。 详细说明： public static function getIP if isset$SERVER"HTTPXFORWARDEDFOR"$ip = $SERVER"HTTPXFORWARDEDFOR"; elseif isset$SERVER"HTTPCLIENTIP" $ip = $SERVER"HTTPCLIENTIP"; elseif isset$SERVER"REMOTEADDR" $ip = $SERVER"REMOTEADDR";...
chCounter indirect SQL Injection and XSS Vulnerabilities
No description provided by source. Exploit Title: chCounter indirect SQL Injection and XSS Vulnerabilities Date: 29.04.2010 Author: Valentin Category: webapps/0day Version: 3.1.1 Tested on: Debian, Apache2, PHP5, MySQL5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...
CVE-2011-4612
icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc error.log via a crafted URL...
webcamXP < 2.16.478 Chat Name HTML Injection
Binary data 2842.prm...
Xoops 1.3.5 - Private Message System Font Attributes HTML Injection
Xoops 1.3.5 - Private Message System Font Attributes HTML Injection source: https://www.securityfocus.com/bid/6344/info Xoops includes a Private Message System for users, so that they may send messages to one another. HTML tags used for font attributes are not sufficiently filtered of malicious...