PT-2018-12898

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.1.4 Description The issue allows a remote authenticated attacker to execute arbitrary SQL commands. This is achieved via the search term parameter in the interface/de identification forms/find drug popup.php file...

CVE-2018-9122

In Crea8social 2018.2, there is Reflected Cross-Site Scripting via the term parameter to the /search URI...

CVE-2018-9122: Improper Neutralization of Input During Web Page Generation

In Crea8social 2018.2, there is Reflected Cross-Site Scripting via the term parameter to the /search URI...

Crea8Social cross-site scripting vulnerability (CNVD-2018-07586)

Crea8social is a PHP-based social networking platform developed by Nigerian software developer Tiamiyu Waliu Kola. A cross-site scripting vulnerability exists in Crea8social version 2018.2. A remote attacker can exploit the vulnerability by sending the 'term' parameter to the /search URI to injec...

CVE-2017-14403

The EyesOfNetwork web interface aka eonweb 5.1-0 has SQL injection via the term parameter to module/admingroup/search.php...

CVE-2017-14403

The EyesOfNetwork web interface aka eonweb 5.1-0 has SQL injection via the term parameter to module/admingroup/search.php...

CVE-2017-14403

The EyesOfNetwork web interface aka eonweb 5.1-0 has SQL injection via the term parameter to module/admingroup/search.php...

CVE-2017-14403: Improper Neutralization of Special Elements used in an SQL Command

The EyesOfNetwork web interface aka eonweb 5.1-0 has SQL injection via the term parameter to module/admingroup/search.php...

CVE-2017-5345

SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute arbitrary SQL commands via the term parameter to the default URI...

CVE-2017-5345

SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute arbitrary SQL commands via the term parameter to the default URI...

PT-2017-16446

Name of the Vulnerable Software and Affected Versions GeniXCMS version 0.0.8 Description The issue allows remote authenticated editors to execute arbitrary SQL commands. This is achieved by exploiting the term parameter in the default URI, specifically in the...

CVE-2017-5345: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute arbitrary SQL commands via the term parameter to the default URI...

OIC Exponent CMS SQL Injection Vulnerability (CNVD-2016-11262)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. An SQL injection vulnerabilit...

CVE-2011-5209

Cross-site scripting XSS vulnerability in search/ in GraphicsClone Script, possibly 1.11, allows remote attackers to inject arbitrary web script or HTML via the term parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in search/ in GraphicsClone Script, possibly 1.11, allows remote attackers to inject arbitrary web script or HTML via the term parameter...

CVE-2011-5209

Cross-site scripting XSS vulnerability in search/ in GraphicsClone Script, possibly 1.11, allows remote attackers to inject arbitrary web script or HTML via the term parameter...

PT-2012-2186

Name of the Vulnerable Software and Affected Versions GraphicsClone Script version 1.11 Description A cross-site scripting XSS issue exists in the search functionality of the GraphicsClone Script, allowing remote attackers to inject arbitrary web script or HTML via the term parameter. This could...

CVE-2011-5209: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search/ in GraphicsClone Script, possibly 1.11, allows remote attackers to inject arbitrary web script or HTML via the term parameter...

PT-2012-5813

Name of the Vulnerable Software and Affected Versions Fork CMS versions prior to 3.2.7 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the term parameter to several API endpoints, including "autocomplete.php",...

CVE-2012-5164

Multiple cross-site scripting XSS vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to 1 autocomplete.php, 2 search/ajax/autosuggest.php, 3 livesuggest.php, or 4 save.php in frontend/modules/search/ajax...