CVE-2025-0493

The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Limited Local File Inclusion in all versions up to, and including, 4.2.14 via the tabname parameter. This makes it possible for unauthenticated attackers to include PHP files on the...

CVE-2025-0493: Improper Limitation of a Pathname to a Restricted Directory

The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Limited Local File Inclusion in all versions up to, and including, 4.2.14 via the tabname parameter. This makes it possible for unauthenticated attackers to include PHP files on the...

PT-2019-18594

Name of the Vulnerable Software and Affected Versions SAMSUNG X7400GX SyncThru Web Service version V6.A6.25 V11.01.05.25 08-21-2015 Description The issue exists in the "/sws.application/information/networkinformationView.sws" endpoint, specifically in the tabName parameter, allowing for XSS...

CVE-2019-7420: Improper Neutralization of Input During Web Page Generation

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.2508-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter...

Design/Logic Flaw

An issue was discovered in OTCMS 3.61. XSS exists in admin/shareswitch.php via these parameters: fieldName fieldName2 tabName...

PT-2018-13886

Name of the Vulnerable Software and Affected Versions OTCMS version 3.61 Description A security issue was found in OTCMS, where a cross-site scripting XSS attack can be executed. This issue is located in the admin/share switch.php file and is triggered by the fieldName, fieldName2, and tabName...

CVE-2018-17086: Improper Neutralization of Input During Web Page Generation

An issue was discovered in OTCMS 3.61. XSS exists in admin/shareswitch.php via these parameters: fieldName fieldName2 tabName...

CVE-2010-5280: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Community Builder Enhanced CBE comcbe component 1.4.8, 1.4.9, and 1.4.10 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tabname parameter in a userProfile action to index.php. NOTE: this can be...

PT-2012-1490

Name of the Vulnerable Software and Affected Versions Community Builder Enhanced CBE com cbe component versions 1.4.8 through 1.4.10 for Joomla! Description The issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tabname parameter in a "userProfile"...