CVE-2024-41346

openflights commit 5234b5b is vulnerable to Cross-Site Scripting XSS via php/submit.php...

EUVD-2001-1501

Malware in sbrugna...

EUVD-2018-2048

Malware in sbrugna...

EUVD-2024-33254

Malicious code in bioql PyPI...

CVE-2025-7575 Zavy86 WikiDocs submit.php image_delete_ajax path traversal

A vulnerability has been found in Zavy86 WikiDocs up to 1.0.77 and classified as critical. Affected by this vulnerability is the function imagedropuploadajax/imagedeleteajax of the file submit.php. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version...

CVE-2025-7575

CVE-2025-7575 affects Zavy86 WikiDocs up to version 1.0.77. The vulnerability lies in the image_drop_upload_ajax and image_delete_ajax functions in submit.php, enabling path traversal. The issue can be exploited remotely and may impact confidentiality, integrity, and availability as described in ...

Code-Projects University Event Management System SQL注入漏洞

Code-Projects University Event Management System is an open source university event management system from Code-Projects. Code-Projects University Event Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from the parameter...

CVE-2024-41346

openflights commit 5234b5b is vulnerable to Cross-Site Scripting XSS via php/submit.php...

CVE-2024-41346

openflights commit 5234b5b is vulnerable to Cross-Site Scripting XSS via php/submit.php...

PT-2022-25535 · Interspire · Interspire Email Marketer

Name of the Vulnerable Software and Affected Versions: Interspire Email Marketer versions prior to 6.5.1 Description: The issue allows for arbitrary file upload through a "create survey and submit survey" operation in surveys submit.php. This can lead to a .php file being accessible under the...

jrtberlin.de XSS vulnerability

Open Bug Bounty ID: OBB-697383 Description| Value ---|--- Affected Website:| jrtberlin.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Design/Logic Flaw

Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a crafted string in Tags or Description within pligg/submit.php...

CVE-2017-17889

Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a crafted string in Tags or Description within pligg/submit.php...

chosensites.com XSS vulnerability

Vulnerable URL: http://www.chosensites.com/submit.php?category=Domain%20Name%20System=%22/%3E%3C/script%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly...

WordPress SendIt plugin <= 1.5.9 - Blind SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress SendIt plugin = 1.5.9 Blind SQL Injection Vulnerability Google Dork: inurl:wp-content/plugins/sendit/submit.php Date: 2011-08-25 Author: evilsocket evilsocket at gmail dot com Software Link: http://wordpress.org/extend/plugins/sendit/...

extreme-fusion <= 4.02 Remote Code Execution Exploit

No description provided by source. ? //Kacper Settings $exploitname = extreme-fusion = 4.02 Remote Code Execution Exploit; $scriptname = eXtreme-fusion 4.02; $scriptsite = http://extreme-fusion.pl/download-cat16; $dork = 'by eXtreme Crew'; // print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :...

Netquery 3.1 submit.php portnum Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/14373/info Netquery is affected by multiple remote vulnerabilities. These issues can allow remote attackers to execute arbitrary commands, disclose sensitive information and carry out cross-site scripting attacks. Netquer...

CVE-2013-1470

Cross-site scripting XSS vulnerability in calendar/index.php in the Calendar plugin in Geeklog before 1.8.2sr1 and 2.0.0 before 2.0.0rc2 allows remote attackers to inject arbitrary web script or HTML via the calendartype parameter to submit.php...

WordPress Plugin SendIt 1.5.9 - Blind SQL Injection

Exploit Title: WordPress SendIt plugin getvar"SELECT COUNT FROM $tableemail where email ='$POSTemailadd' and idlista = '$POSTlista';"; As you can see, $POSTlista parameter is nor validated neither escaped, so you can blind sql inject it using $usercount for the boolean condition checking :...

WordPress Plugin SendIt 1.5.9 - Blind SQL Injection

WordPress Plugin SendIt 1.5.9 - Blind SQL Injection Exploit Title: WordPress SendIt plugin getvar"SELECT COUNT FROM $tableemail where email ='$POSTemailadd' and idlista = '$POSTlista';"; As you can see, $POSTlista parameter is nor validated neither escaped, so you can blind sql inject it using...