27 matches found
FUDForum 3.1.0 - Cross-Site Scripting Detection
FUDForum 3.1.0 contains a cross-site scripting vulnerability which allows remote attackers to inject JavaScript via index.php in the "srch" parameter. !/usr/bin/env python3 -- coding: utf-8 -- """FUDForum 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...
CVE-2021-27519
A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter...
📄 Hop.bg Cross Site Scripting
Hop.bg appears to suffer from a cross site scripting vulnerability. It is unclear what vulnerable code base is being used or if it's custom, however, the researcher has not heard a response from the vendor and they have not addressed the issue, putting their users at risk, so this is being...
EUVD-2019-15815
Malware in sbrugna...
PT-2021-15882
Name of the Vulnerable Software and Affected Versions Stock in & out WordPress plugin versions 1.0.0 through 1.0.4 Description The issue concerns a reflected XSS problem due to the lack of validation, sanitization, or escaping of the srch POST parameter in the search functionality. This...
CVE-2021-24346: Improper Neutralization of Input During Web Page Generation
The Stock in & out WordPress plugin through 1.0.4 has a search functionality, the lowest accessible level to it being contributor. The srch POST parameter is not validated, sanitised or escaped before using it in the echo statement, leading to a reflected XSS issue...
CVE-2021-27519
A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter...
CVE-2021-27519
A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter...
PT-2021-17491
Name of the Vulnerable Software and Affected Versions FUDForum version 3.1.0 Description A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the "index.php" endpoint in the srch parameter. Recommendations For FUDForum version 3.1.0, consider disabling the srch...
CVE-2021-27519: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter...
PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script is a local life service online search website system script by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script version 2.0.1, which can be...
CVE-2019-6248
PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as demonstrated by restaurants-details.php...
CVE-2019-6248
PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as demonstrated by restaurants-details.php...
PT-2019-18053
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script version 2.0.1 Description The issue concerns a Reflected XSS vulnerability. It can be exploited via the srch parameter in the restaurants-details.php page. Recommendations For...
CVE-2019-6248: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as demonstrated by restaurants-details.php...
CVE-2019-6248
CVE-2019-6248 affects PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1. The connected sources consistently describe a Reflected XSS vulnerability triggered via the srch parameter, demonstrated by the restaurants-details.php endpoint. The vulnerability arises in user-supplied...
CVE-2018-6364: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter...
PT-2018-17507
Name of the Vulnerable Software and Affected Versions Multilanguage Real Estate MLM Script versions prior to 3.0 Description The issue exists due to SQL Injection in the /product-list.php API endpoint, specifically via the srch parameter. Recommendations For versions prior to 3.0, update to versi...
