CVE-2026-33723

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the "Subscribe::save" method in "objects/subscribe.php" concatenates the "$this-usersid" property directly into an INSERT SQL query without sanitization or parameterized binding. This property originates from...

CVE-2026-33723: Improper Neutralization of Special Elements used in an SQL Command

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the Subscribe::save method in objects/subscribe.php concatenates the $this-usersid property directly into an INSERT SQL query without sanitization or parameterized binding. This property originates from...

soytransportation.org XSS vulnerability

Open Bug Bounty ID: OBB-663387 Description| Value ---|--- Affected Website:| soytransportation.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

krasinvest-nepremicnine.si XSS vulnerability

Open Bug Bounty ID: OBB-640655 Description| Value ---|--- Affected Website:| krasinvest-nepremicnine.si Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

towersupplies.com XSS vulnerability

Open Bug Bounty ID: OBB-598978 Description| Value ---|--- Affected Website:| towersupplies.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

topshows.ru XSS vulnerability

Open Bug Bounty ID: OBB-597585 Description| Value ---|--- Affected Website:| topshows.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kurakuraku.com XSS vulnerability

Open Bug Bounty ID: OBB-567206 Description| Value ---|--- Affected Website:| kurakuraku.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

babushahi.com XSS vulnerability

Open Bug Bounty ID: OBB-540308 Description| Value ---|--- Affected Website:| babushahi.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

crocostars.com XSS vulnerability

Open Bug Bounty ID: OBB-448630 Description| Value ---|--- Affected Website:| crocostars.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

wellgames.com XSS vulnerability

Open Bug Bounty ID: OBB-440618 Description| Value ---|--- Affected Website:| wellgames.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-6489

Multiple Cross-Site Scripting XSS issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data element, state, cat, id, cid passed to the EPESI-master/modules/Utils/Watchdog/subscribe.php URL. An attacker could execute arbitrary HTML and...

CVE-2017-6489

Multiple Cross-Site Scripting XSS issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data element, state, cat, id, cid passed to the EPESI-master/modules/Utils/Watchdog/subscribe.php URL. An attacker could execute arbitrary HTML and...

CVE-2017-6489: Improper Neutralization of Input During Web Page Generation

Multiple Cross-Site Scripting XSS issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data element, state, cat, id, cid passed to the EPESI-master/modules/Utils/Watchdog/subscribe.php URL. An attacker could execute arbitrary HTML and...

PT-2017-17106

Name of the Vulnerable Software and Affected Versions EPESI version 1.8.1.1 Description Multiple Cross-Site Scripting XSS issues were discovered due to insufficient filtration of user-supplied data passed to the "EPESI-master/modules/Utils/Watchdog/subscribe.php" URL. The vulnerable parameters...

易想团购 subscribe.php unsubscribe参数 SQL注入

No description provided by source...

jsbtransport.se XSS vulnerability

Vulnerable URL: http://www.jsbtransport.se/include/subscribe.php?id=194888="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP...

westerhuus.se XSS vulnerability

Vulnerable URL: http://www.westerhuus.se/include/subscribe.php?id=167282="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP websit...

lavendum.se XSS vulnerability

Vulnerable URL: http://www.lavendum.se/include/subscribe.php?id=219211="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 1 VIP website...

lisabjorke.se XSS vulnerability

Vulnerable URL: http://www.lisabjorke.se/include/subscribe.php?id=209906="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP websit...

cathie.se XSS vulnerability

Vulnerable URL: http://cathie.se/include/subscribe.php?id=228702="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 2 VIP website status...