EUVD-2019-20018

Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various POST parameters. Attackers can inject malicious SQL payloads into parameters like txtGender, religion, Fage, an...

CVE-2020-12766

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...

Sql injection

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...

Unfixed XSS vulnerability at seatransport.e-transport.gov.gr

Security researcher St@R-gaZ3r, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting seatransport.e-transport.gov.gr, which at the time of submission ranked 1603963 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...