12 matches found
Exploit for CVE-2026-88854
CVE-2026-88854 — OrdaSoft Joomla Gallery SQL Injection Python...
CVE-2026-88854 Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7
Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...
CVE-2026-88854: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...
PT-2026-95994
Name of the Vulnerable Software and Affected Versions OrdaSoft Joomla Gallery versions prior to 6.2.7 Description An unauthenticated SQL Injection exists in the OrdaSoft Joomla Gallery extension. The functions showSearchResult and showSearchResultAjax process the textsearch or searchText request...
CVE-2026-1589
A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknown function of the file /ramonsys/inquiry/index.php. This manipulation of the argument txtsearch causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed an...
EUVD-2004-2615
Malware in sbrugna...
CVE-2005-4255
Cross-site scripting XSS vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded phrase parameter...
CVE-2005-4255
Cross-site scripting XSS vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded phrase parameter...
CVE-2005-4255: Undefined Security Weakness
Cross-site scripting XSS vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded phrase parameter...
CVE-2004-2624
CVE-2004-2624: WackoWiki 3.5 contains a cross-site scripting (XSS) flaw in the TextSearch feature. The vulnerability enables injection of arbitrary script/HTML via the phrase parameter, allowing remote attackers to execute client-side code in affected pages. Documents consistently identify WackoW...
CVE-2004-2624: Undefined Security Weakness
Cross-site scripting XSS vulnerability in "TextSearch" in WackoWiki 3.5 allows remote attackers to inject arbitrary web script or HTML via the "phrase" parameter...