CVE-2022-36787

webvendome - webvendome SQL Injection. SQL Injection in the Parameter " DocNumber" Request : Get Request : /webvendome/showfiles.aspx?jobnumber=nullDoc Number=HERE...

PT-2022-23626 · Unknown · Webvendome

Name of the Vulnerable Software and Affected Versions: webvendome affected versions not specified Description: The issue is related to SQL Injection in the DocNumber parameter. It can be exploited through a GET request to the /webvendome/showfiles.aspx endpoint with a specially crafted DocNumber...

dw2.psyc.virginia.edu XSS vulnerability

Vulnerable URL: https://dw2.psyc.virginia.edu/implicit/showfiles.jsp?user=chawkins"'/;a=eval;b=alert;ab/xssposed/;...