EUVD-2018-6852

Malware in sbrugna...

Cross site scripting

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/slideshow.php has XSS...

CVE-2018-14970

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/slideshow.php has XSS...

PT-2018-12847

Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1 Description An issue was discovered in the upload/System/Controller/backend/slideshow.php file, which has a Cross-Site Scripting XSS issue. Recommendations For QCMS version 3.0.1, consider disabling access to the slideshow.p...

CVE-2018-14970: Improper Neutralization of Input During Web Page Generation

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/slideshow.php has XSS...

lakewoodranchgov.org XSS vulnerability

Vulnerable URL: http://www.lakewoodranchgov.org/slideshow.php?speed=3.5=1"...

welshrockabilly.co.uk XSS vulnerability

Vulnerable URL: http://www.welshrockabilly.co.uk/slideshow.php?Action=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13105157 VIP...

PhotoPost Pro 5.1 slideshow.php photo Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/12920/info Multiple input validation vulnerabilities reportedly affect PhotoPost Pro. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical...

CVE-2009-2009: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 curdirpath parameter to main/document/slideshow.php and the 2 file parameter to main/exercice/testheaderpage.php...

CVE-2006-4920: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Site@School S@S 2.4.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to 1 starnet/modules/snallbum/slideshow.php, and 2 starnet/themes/editable/main.inc.php...

CVE-2005-0928

Multiple cross-site scripting XSS vulnerabilities in PhotoPost PHP Pro 5.x allow remote attackers to inject arbitrary web script or HTML via the 1 cat, 2 password, 3 ppuser, 4 sort, or 5 si parameters to showgallery.php, the 6 ppuser, 7 sort, or 8 si parameters to showmembers.php, or 9 the photo...

CVE-2005-0928

Multiple cross-site scripting XSS vulnerabilities in PhotoPost PHP Pro 5.x allow remote attackers to inject arbitrary web script or HTML via the 1 cat, 2 password, 3 ppuser, 4 sort, or 5 si parameters to showgallery.php, the 6 ppuser, 7 sort, or 8 si parameters to showmembers.php, or 9 the photo...

CVE-2005-0928: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in PhotoPost PHP Pro 5.x allow remote attackers to inject arbitrary web script or HTML via the 1 cat, 2 password, 3 ppuser, 4 sort, or 5 si parameters to showgallery.php, the 6 ppuser, 7 sort, or 8 si parameters to showmembers.php, or 9 the photo...