8 matches found
CVE-2024-3087: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this issue is some unknown functionality of the file ambulance-tracking.php of the component Ambulance Tracking Page. The manipulation of the argument searchdata lead...
CVE-2024-3086: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this vulnerability is an unknown functionality of the file ambulance-tracking.php of the component Ambulance Tracking Page. The manipulation of the argument searchdata leads to cro...
de.foto.com XSS vulnerability
Vulnerable URL: http://de.foto.com/tracking.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 3 VIP website status:| No Check de.foto.com...
de.foto.com XSS vulnerability
Vulnerable URL: http://de.foto.com/tracking.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 3 VIP website status:| No Check de.foto.com...
Php-Stats 0.1.9.2 Tracking.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25674/info Php-Stats is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
PT-2012-1538
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 3.3.x through 3.3.10.0 phpMyAdmin versions 3.4.x through 3.4.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted table name, triggering improper HTML rendering on a Tracking...
CVE-2007-4917: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in tracking.php in PHP-Stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML via the ip parameter in an online action, a different vector than CVE-2007-4334...
CVE-2007-4383: Undefined Security Weakness
PHP remote file inclusion vulnerability in tracking.php in Trackeur 1 allows remote attackers to execute arbitrary PHP code via a URL in the header parameter. NOTE: CVE and a third party dispute this vulnerability because header is defined before use. The researcher is known to be unreliable...