CVE-2023-37164

Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the catid parameter at /shop/?module=shop&action=search...

CVE-2023-37164

Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the catid parameter at /shop/?module=shop&action=search...

Diafan CMS 跨站脚本漏洞

Diafan CMS is a website builder from Diafan. It is used to create online stores. A cross-site scripting vulnerability exists in Diafan CMS v6.0, which originates from the lack of effective filtering and escaping of user-supplied data in the catid parameter of /shop/?module=shop&action=search, whi...

abahouse.co.jp XSS vulnerability

Vulnerable URL: http://abahouse.co.jp/english/shop-search/index.php?search==/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3Ecollex Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly...

mytrendyphone.es XSS vulnerability

Vulnerable URL: https://www.mytrendyphone.es/shop/search-1.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 198543 VIP website status:| No Check mytrendyphone.es SSL connection:...