PT-2025-6854

Name of the Vulnerable Software and Affected Versions pihome-shc PiHome version 1.77 Description A problem has been found in the /index.php file, affecting some unknown functionality. The issue is related to the manipulation of the $ SERVER'PHP SELF' argument, which leads to cross site scripting...

PT-2023-9940 · Unknown · Ahmyi Rivettracker

Name of the Vulnerable Software and Affected Versions: ahmyi RivetTracker affected versions not specified Description: A problematic issue has been found in ahmyi RivetTracker, affecting some unknown processing. The manipulation of the argument $ SERVER'PHP SELF' leads to cross site scripting. Th...

PT-2021-23013

Name of the Vulnerable Software and Affected Versions infaveo-helpdesk versions 1.11.0 and below Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the $ SERVER"PHP SELF" parameter in the dompdf/dompdf/www/demo.php file. This enables...

PT-2021-22046

Name of the Vulnerable Software and Affected Versions: Notices WordPress plugin versions up to and including 6.1 Description: The issue concerns a Reflected Cross-Site Scripting vulnerability. It is caused by a reflected $ SERVER"PHP SELF" value in the /notices.php file, allowing attackers to...

PT-2021-22532

Name of the Vulnerable Software and Affected Versions: Easy Social Icons plugin versions 3.0.8 and earlier Description: The issue allows for a reflected Cross-Site Scripting attack by injecting malicious code in the request path on certain configurations, including Apache+modPHP. This is possible...

CVE-2017-1000428

flatCore-CMS 1.4.6 is vulnerable to reflected XSS in usermanagement.php due to the use of $SERVER'PHPSELF' to build links and a stored XSS in the admin log panel by specifying a malformed User-Agent string...