8165 matches found
Joomla! Zh GoogleMap 8.4.0.0 SQL Injection
input name="id" value="-11 UNION ALL SELECT...
Joomla! Component JSP Tickets 1.1 - SQL Injection
Joomla! Component JSP Tickets 1.1 - SQL Injection Exploit Title: Joomla! Component JSP Tickets 1.1 - SQL Injection Dork: N/A Date: 04.02.2018 Vendor Homepage: http://joomlaserviceprovider.com/ Software Link:...
Joomla Zh GoogleMap 8.4.0.0 Component - SQL Injection Vulnerability
Exploit for php platform in category web applications input name="id" value="-11 UNION ALL SELECT...
Joomla Zh BaiduMap 3.0.0.1 Component - SQL Injection Vulnerability
Exploit for php platform in category web applications input name="id" value="-11 UNION ALL SELECT...
Design/Logic Flaw
Monstra CMS through 3.0.4 has XSS in the title function in plugins/box/pages/pages.plugin.php via a page title to admin/index.php...
CVE-2018-6550
Monstra CMS through 3.0.4 has XSS in the title function in plugins/box/pages/pages.plugin.php via a page title to admin/index.php...
CVE-2018-6550
CVE-2018-6550 affects Monstra CMS up to version 3.0.4, where an XSS flaw exists in the title handling of plugins/box/pages/pages.plugin.php that can be triggered via a crafted page title sent to admin/index.php. Public sources consistently describe an XSS in the title function, with potential imp...
CVE-2018-6550
Monstra CMS through 3.0.4 has XSS in the title function in plugins/box/pages/pages.plugin.php via a page title to admin/index.php...
CVE-2018-6550: Improper Neutralization of Input During Web Page Generation
Monstra CMS through 3.0.4 has XSS in the title function in plugins/box/pages/pages.plugin.php via a page title to admin/index.php...
PT-2018-17629
Name of the Vulnerable Software and Affected Versions Monstra CMS versions prior to 3.0.5 Description The issue concerns a problem with the title function in the pages.plugin.php file within the plugins/box/pages directory. This problem allows for XSS attacks when a page title is sent to...
Cross-site Scripting (XSS)
Kibana is vulnerable to cross-site scripting XSS attacks. This is because the visualization title is enabled in render function of visualizeembeddablefactory.js which allows an attacker to inject and execute arbitrary webscript...
ok.ru: Хранимая XSS в личных сообщениях новое место
Stored XSS in chat title at https://ok.ru/messages...
CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2018-02622)
CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engines. A cross-site scripting vulnerability exists in CMS Made Simple CMSMS 2.2.5. The vulnerability can be exploited to conduct cross-site scripting attacks via the title parameter...
CVE-2018-5963
CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...
Code injection
CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...
CVE-2018-5963
CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...
CVE-2018-5963
CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...
CVE-2018-5963: Improper Neutralization of Input During Web Page Generation
CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...
PT-2018-17251
Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.5 Description: The issue is related to a Cross-Site Scripting XSS problem. It occurs in the admin/addbookmark.php file through the title parameter. Recommendations: For CMS Made Simple version 2.2.5, update to a...
Professional Local Directory Script 1.0 SQL Injection
Exploit Title: Professional Local Directory Script 1.0 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.eihitech.com/ Software Link: http://www.eihitech.com/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5973 Exploit Author: Ihsan Sencan Author...