18 matches found
CVE-2025-65337: Improper Neutralization of Input During Web Page Generation
Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...
EUVD-2021-13048
Malware in sbrugna...
CVE-2021-26224
Cross-site scripting XSS vulnerability in SourceCodester Fantastic-Blog-CMS V 1.0 allows remote attackers to inject arbitrary web script or HTML via the search field to search.php...
CVE-2021-26231
SQL injection vulnerability in SourceCodester Fantastic Blog CMS v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to category.php...
Sourcecodester Fantastic Blog CMS SQL Injection Vulnerability (CNVD-2022-77952)
SourceCodester Fantastic Blog CMS is an application. Absolutely brilliant web content management system for blogs/posts. sourcecodester Fantastic Blog CMS version 1.0 is vulnerable to SQL injection. An attacker can exploit this vulnerability to inject queries in /fantasticblog/single.php via the ...
Sql injection
A SQL injection vulnerability exists in Sourcecodester Fantastic Blog CMS 1.0 . An attacker can inject query in "/fantasticblog/single.php" via the "id=5" parameters...
CVE-2022-28512
A SQL injection vulnerability exists in Sourcecodester Fantastic Blog CMS 1.0 . An attacker can inject query in "/fantasticblog/single.php" via the "id=5" parameters...
PT-2022-19060
Name of the Vulnerable Software and Affected Versions Sourcecodester Fantastic Blog CMS version 1.0 Description A SQL injection issue exists, allowing an attacker to inject queries in the "/fantasticblog/single.php" endpoint via the id parameter. Recommendations For Sourcecodester Fantastic Blog...
CVE-2022-28512: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability exists in Sourcecodester Fantastic Blog CMS 1.0 . An attacker can inject query in "/fantasticblog/single.php" via the "id=5" parameters...
SourceCodester Fantastic-Blog-CMS Cross-Site Scripting Vulnerability
SourceCodester Fantastic-Blog-CMS is an application. A blogging system. version 1.0 of SourceCodester Fantastic-Blog-CMS contains a security vulnerability that can be exploited by remote attackers to inject arbitrary web script or HTML via the search field search.php...
CVE-2021-26224
Cross-site scripting XSS vulnerability in SourceCodester Fantastic-Blog-CMS V 1.0 allows remote attackers to inject arbitrary web script or HTML via the search field to search.php...
CVE-2021-26224
Cross-site scripting XSS vulnerability in SourceCodester Fantastic-Blog-CMS V 1.0 allows remote attackers to inject arbitrary web script or HTML via the search field to search.php...
CVE-2021-26231
SQL injection vulnerability in SourceCodester Fantastic Blog CMS v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to category.php...
CVE-2021-26231
SQL injection vulnerability in SourceCodester Fantastic Blog CMS v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to category.php...
CVE-2021-26224: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in SourceCodester Fantastic-Blog-CMS V 1.0 allows remote attackers to inject arbitrary web script or HTML via the search field to search.php...
CVE-2021-26231: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in SourceCodester Fantastic Blog CMS v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to category.php...
PT-2021-16972
Name of the Vulnerable Software and Affected Versions SourceCodester Fantastic Blog CMS version 1.0 Description The issue allows remote attackers to execute arbitrary SQL statements. This is achieved via the id parameter to the "category.php" endpoint. Recommendations For SourceCodester Fantastic...
PT-2021-4000
Name of the Vulnerable Software and Affected Versions SourceCodester Fantastic-Blog-CMS version 1.0 Description The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the search field in the...