CVE-2026-33723: Improper Neutralization of Special Elements used in an SQL Command

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the Subscribe::save method in objects/subscribe.php concatenates the $this-usersid property directly into an INSERT SQL query without sanitization or parameterized binding. This property originates from...

soytransportation.org XSS vulnerability

Open Bug Bounty ID: OBB-663387 Description| Value ---|--- Affected Website:| soytransportation.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

krasinvest-nepremicnine.si XSS vulnerability

Open Bug Bounty ID: OBB-640655 Description| Value ---|--- Affected Website:| krasinvest-nepremicnine.si Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

towersupplies.com XSS vulnerability

Open Bug Bounty ID: OBB-598978 Description| Value ---|--- Affected Website:| towersupplies.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

topshows.ru XSS vulnerability

Open Bug Bounty ID: OBB-597585 Description| Value ---|--- Affected Website:| topshows.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kurakuraku.com XSS vulnerability

Open Bug Bounty ID: OBB-567206 Description| Value ---|--- Affected Website:| kurakuraku.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

babushahi.com XSS vulnerability

Open Bug Bounty ID: OBB-540308 Description| Value ---|--- Affected Website:| babushahi.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

crocostars.com XSS vulnerability

Open Bug Bounty ID: OBB-448630 Description| Value ---|--- Affected Website:| crocostars.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

wellgames.com XSS vulnerability

Open Bug Bounty ID: OBB-440618 Description| Value ---|--- Affected Website:| wellgames.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-6489

Multiple Cross-Site Scripting XSS issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data element, state, cat, id, cid passed to the EPESI-master/modules/Utils/Watchdog/subscribe.php URL. An attacker could execute arbitrary HTML and...

CVE-2017-6489: Improper Neutralization of Input During Web Page Generation

Multiple Cross-Site Scripting XSS issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data element, state, cat, id, cid passed to the EPESI-master/modules/Utils/Watchdog/subscribe.php URL. An attacker could execute arbitrary HTML and...

易想团购 subscribe.php unsubscribe参数 SQL注入

No description provided by source...

jsbtransport.se XSS vulnerability

Vulnerable URL: http://www.jsbtransport.se/include/subscribe.php?id=194888="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP...

westerhuus.se XSS vulnerability

Vulnerable URL: http://www.westerhuus.se/include/subscribe.php?id=167282="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP websit...

lavendum.se XSS vulnerability

Vulnerable URL: http://www.lavendum.se/include/subscribe.php?id=219211="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 1 VIP website...

lisabjorke.se XSS vulnerability

Vulnerable URL: http://www.lisabjorke.se/include/subscribe.php?id=209906="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP websit...

cathie.se XSS vulnerability

Vulnerable URL: http://cathie.se/include/subscribe.php?id=228702="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 2 VIP website status...

mineminerals.se XSS vulnerability

Vulnerable URL: http://www.mineminerals.se/include/subscribe.php?id=218972="'; Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 1 VIP websit...

PHP Lite Calendar Express 2.2 subscribe.php cid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/14504/info Calendar Express is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...

Unfixed XSS vulnerability at www.cpeduc.com

Security researcher THC, has submitted on 27/06/2010 a cross-site-scripting XSS vulnerability affecting www.cpeduc.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/06/2010. It is currently unfixed...