16 matches found
EUVD-2006-1538
Malware in sbrugna...
CVE-2021-26765
SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid parameter to edit-sub.php...
CVE-2021-26765: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid parameter to edit-sub.php...
PHPGurukul Student Record System SQL注入漏洞
PHPGurukul Student Record System is an application. A SQL injection vulnerability exists in PHPGurukul Student Record System version 4.0, which stems from the lack of validation of externally entered SQL statements in the sid parameter of edit-sub.php, and can be exploited by remote attackers to...
dnalab.co.kr XSS vulnerability
Open Bug Bounty ID: OBB-638548 Description| Value ---|--- Affected Website:| dnalab.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
queenschoice.com XSS vulnerability
Open Bug Bounty ID: OBB-575699 Description| Value ---|--- Affected Website:| queenschoice.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
nagwafashion.com XSS vulnerability
Open Bug Bounty ID: OBB-575693 Description| Value ---|--- Affected Website:| nagwafashion.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
dianeandcoonline.com XSS vulnerability
Open Bug Bounty ID: OBB-575662 Description| Value ---|--- Affected Website:| dianeandcoonline.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
formalsxo.com XSS vulnerability
Open Bug Bounty ID: OBB-575637 Description| Value ---|--- Affected Website:| formalsxo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
justfixuae.ae XSS vulnerability
Vulnerable URL: http://justfixuae.ae/product-page-sub.php?HID=278=86=1%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10339365 VIP websi...
shopfoxylady.com XSS vulnerability
Vulnerable URL: http://shopfoxylady.com/sub.php?sStyle=%22%22%3B%3C%2Fscript%3E%3Cscript%3Eprompt%28%2FXSSPOSED%2F%29%3C%2Fscript%3E%3C%22+=Search=76589=Search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:|...
Dow Group SQL Injection
IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Dow Group sub.php?solutioncatid AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.dowgroup.com/ Persian Gulf 4 Ever! Dork : "inurl:sub.php?solutioncatid=" Exploite:...
CVE-2006-1534
Multiple SQL injection vulnerabilities in Null news allow remote attackers to execute arbitrary SQL commands via 1 the useremail parameter in a lostpass.php, and the 2 useremail and 3 userusername parameters in b sub.php and c unsub.php...
Sql injection
Multiple SQL injection vulnerabilities in Null news allow remote attackers to execute arbitrary SQL commands via 1 the useremail parameter in a lostpass.php, and the 2 useremail and 3 userusername parameters in b sub.php and c unsub.php...
CVE-2006-1534: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Null news allow remote attackers to execute arbitrary SQL commands via 1 the useremail parameter in a lostpass.php, and the 2 useremail and 3 userusername parameters in b sub.php and c unsub.php...
CVE-2006-1237: Undefined Security Weakness
Multiple SQL injection vulnerabilities in DSNewsletter 1.0, with magicquotesgpc disabled, allow remote attackers to execute arbitrary SQL commands via the email parameter to 1 include/sub.php, 2 include/confirm.php, or 3 include/unconfirm.php...