CVE-2020-10408

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-subscriber.php by adding a question mark ? followed by the payload...

CVE-2020-10408

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-subscriber.php by adding a question mark ? followed by the payload...

CVE-2020-10408: Improper Neutralization of Input During Web Page Generation

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-subscriber.php by adding a question mark ? followed by the payload...

Sql injection

subscriber.php in Webgalamb through 7.0 is vulnerable to SQL injection via the Client-IP HTTP request header...

PT-2019-9842

Name of the Vulnerable Software and Affected Versions Webgalamb versions prior to 7.0 Description The issue allows for SQL injection via the Client-IP HTTP request header in the subscriber.php file. Recommendations For versions prior to 7.0, update to version 7.0 or later to resolve the issue...

CVE-2018-19510: Improper Neutralization of Special Elements used in an SQL Command

subscriber.php in Webgalamb through 7.0 is vulnerable to SQL injection via the Client-IP HTTP request header...

CVE-2018-19514: Unrestricted Upload of File with Dangerous Type

In Webgalamb through 7.0, an arbitrary code execution vulnerability could be exploited remotely without authentication. Exploitation requires authentication bypass to access administrative functions of the site to upload a crafted CSV file with a malicious payload that becomes part of a PHP eval...

PT-2019-9846

Name of the Vulnerable Software and Affected Versions Webgalamb versions prior to 7.0 Description The issue allows for arbitrary code execution, which can be exploited remotely without initial authentication. To exploit this, an attacker must bypass authentication to access administrative site...

donnafletchercrow.com XSS vulnerability

Open Bug Bounty ID: OBB-663392 Description| Value ---|--- Affected Website:| donnafletchercrow.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...