14 matches found
CVE-2026-3001: Improper Neutralization of Input During Web Page Generation
The Gutenverse plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.4.6 due to insufficient input sanitization and output escaping. Specifically, the rendercontent method in class-search-result-title.php outputs the val...
EUVD-2010-4757
Malware in sbrugna...
CVE-2023-3015
A vulnerability has been found in yiwent Vip Video Analysis 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file data/title.php. The manipulation of the argument titurl leads to server-side request forgery. The attack can be launched remotely. The...
CVE-2023-3015: Server-Side Request Forgery (SSRF)
A vulnerability has been found in yiwent Vip Video Analysis 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file data/title.php. The manipulation of the argument titurl leads to server-side request forgery. The attack can be launched remotely. The...
vernonpress.com XSS vulnerability
Vulnerable URL: https://vernonpress.com/title.php?id=18"head...
OPEN IT OverLook 'title.php' Cross Site Scripting Vulnerability
OverLook is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openit:overlook";...
CVE-2010-4792
Cross-site scripting XSS vulnerability in title.php in OPEN IT OverLook 5.0 allows remote attackers to inject arbitrary web script or HTML via the frame parameter...
CVE-2010-4792
Cross-site scripting XSS vulnerability in title.php in OPEN IT OverLook 5.0 allows remote attackers to inject arbitrary web script or HTML via the frame parameter...
CVE-2010-4792
OPEN IT OverLook 5.0 contains a cross-site scripting (XSS) vulnerability in title.php that can be triggered via the frame parameter to inject arbitrary web script/HTML. This is the same issue described across multiple sources (OpenVAS NASL, NVD listing). The CVSS base score is 4.3 (Medium) with n...
PT-2011-1740
Name of the Vulnerable Software and Affected Versions OPEN IT OverLook version 5.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the frame parameter in the title.php file. Recommendations For OPEN IT...
CVE-2010-4792: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in title.php in OPEN IT OverLook 5.0 allows remote attackers to inject arbitrary web script or HTML via the frame parameter...
OPEN IT OverLook 5 - 'title.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/43872/info OverLook is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...
CVE-2006-0313
Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors involving 1 util.php, 2 userpref.php, 3 user.php, 4 uploadfrm.php, 5 title.php, 6 team.php, 7 stats.php, 8 page.php, 9 org.php, 10 member.php...
CVE-2006-0313: Undefined Security Weakness
Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors involving 1 util.php, 2 userpref.php, 3 user.php, 4 uploadfrm.php, 5 title.php, 6 team.php, 7 stats.php, 8 page.php, 9 org.php, 10 member.php...