EUVD-2024-32336

Malicious code in bioql PyPI...

CVE-2024-12841 Emlog Pro tag.php cross site scripting

A vulnerability was found in Emlog Pro up to 2.4.1. It has been classified as problematic. This affects an unknown part of the file /admin/tag.php. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2024-12841 Emlog Pro tag.php cross site scripting

A vulnerability was found in Emlog Pro up to 2.4.1. It has been classified as problematic. This affects an unknown part of the file /admin/tag.php. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclose...

PT-2024-17760 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro versions up to 2.4.1 Description: A problem has been found in Emlog Pro that affects an unknown part of the file /admin/tag.php. The manipulation of the keyword argument leads to cross site scripting. It is possible to initiate the...

CVE-2024-12841: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Emlog Pro up to 2.4.1. It has been classified as problematic. This affects an unknown part of the file /admin/tag.php. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2024-9788

A vulnerability has been found in LyLmespage 1.9.5 and classified as critical. This vulnerability affects unknown code of the file /admin/tag.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may...

CVE-2024-9788 LyLme_spage tag.php sql injection

A vulnerability has been found in LyLmespage 1.9.5 and classified as critical. This vulnerability affects unknown code of the file /admin/tag.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may...

CVE-2024-9788: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in LyLmespage 1.9.5 and classified as critical. This vulnerability affects unknown code of the file /admin/tag.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may...

CVE-2024-3763 Emlog Pro Post Tag tag.php cross site scripting

A vulnerability was found in Emlog Pro 2.2.10. It has been rated as problematic. This issue affects some unknown processing of the file /admin/tag.php of the component Post Tag Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2024-3763: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Emlog Pro 2.2.10. It has been rated as problematic. This issue affects some unknown processing of the file /admin/tag.php of the component Post Tag Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2009-10003

A vulnerability was found in capnsquarepants wordcraft up to 0.6. It has been classified as problematic. Affected is an unknown function of the file tag.php. The manipulation of the argument tag leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 0.7 ...

CVE-2009-10003

Capnsquarepants Wordcraft

CVE-2009-10003: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in capnsquarepants wordcraft up to 0.6. It has been classified as problematic. Affected is an unknown function of the file tag.php. The manipulation of the argument tag leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 0.7 ...

PT-2023-9871

Name of the Vulnerable Software and Affected Versions capnsquarepants wordcraft versions up to 0.6 Description A vulnerability was found in the software, classified as problematic. It affects an unknown function of the file tag.php. The manipulation of the tag argument leads to cross-site...

SQL Injection in ampache/ampache

Description The application does not validate and escape the type parameter before using it in a SQL statement in Model/Tag.php, leading to a SQL Injection Proof of Concept Time delay: GET /browse.php?action=tag&type=0%27orifnow=sysdate,sleep3,0or%27 HTTP/1.1 Host: demo.ampache.dev sec-ch-ua:...

armbets.tv XSS vulnerability

Vulnerable URL: http://www.armbets.tv/main-tag.php?tag=3=%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E=1 Details: Description| Value ---|--- Patched:| Yes, at 05.10.2016 Latest check for patch:| 05.10.2016 19:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

thejokes.ru XSS vulnerability

Vulnerable URL: http://thejokes.ru/tag.php?tag= Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6901113 VIP website status:| No Check thejokes.ru SSL...

quizzes.cc XSS vulnerability

Vulnerable URL: http://quizzes.cc/tags.php?tag=Countries" Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 575630 VIP website status:| No Check quizzes.cc S...

dedecms v5.1 /tag.php SQL注入漏洞

No description provided by source...

MyBB MyBBlog 1.0 Cross Site Scripting

Title : MyBB MyBBlog 1.0 Plugin Cross Site Scripting Author : DevilScreaM Date : 24 October 2014 Category : Web Applications Vendor : https://github.com/JN-Jones/MyBBlog Download : http://community.mybb.com/mods.php?action=view&pid=221 Version : 1.0 Greetz : newbie-security.or.id | Borneo Securit...