5218 matches found
Ultimate PHP Board 安全漏洞
Ultimate PHP Board is a message board software from PHP Outburst open source. A security vulnerability exists in Ultimate PHP Board version 2.2.7, which stems from improper handling of the uname parameter in the lostpassword.php file, which could lead to a cross-site scripting attack...
CVE-2025-61540
SQL injection vulnerability in Ultimate PHP Board 2.2.7 via the username field in lostpassword.php...
PT-2025-42475
Name of the Vulnerable Software and Affected Versions Ultimate PHP Board version 2.2.7 Description An issue exists in Ultimate PHP Board that allows for cross-site scripting XSS. The issue is located in the lostpassword.php file and involves the u name parameter. Exploitation occurs through...
CVE-2025-61540: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Ultimate PHP Board 2.2.7 via the username field in lostpassword.php...
CVE-2025-61539: Improper Neutralization of Input During Web Page Generation
Cross site scripting XSS vulnerability in Ultimate PHP Board 2.2.7 via the uname parameter in lostpassword.php...
CVE-2025-61540
SQL injection vulnerability in Ultimate PHP Board 2.2.7 via the username field in lostpassword.php...
PT-2025-42476
Name of the Vulnerable Software and Affected Versions Ultimate PHP Board version 2.2.7 Description A SQL injection issue exists in Ultimate PHP Board version 2.2.7. The issue is located in the lostpassword.php file, specifically through the username field. Successful exploitation could allow an...
CVE-2025-10185: Improper Neutralization of Special Elements used in an SQL Command
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in the action nfloadformentries in all versions up to, and including, 9.1.6 due to insufficient escaping on the user supplied parameter and lack of sufficient...
WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by stealthcopter in WordPress Plugin Ultimate Addons for WPBakery Page Builder versions 3.21.1...
CVE-2025-60378: Improper Neutralization of Input During Web Page Generation
Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected content renders in emails, PDFs, and messaging/chat modules sent to clients or team members, enabling phishing, credential theft, and business emai...
CVE-2025-9703
The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder WordPress plugin before 2.5.0 does not sanitize SVG file contents when uploaded through the xmlrpc.php endpoint using base64 encode, leading to a Cross-Site Scripting vulnerability...
EUVD-2021-11188
Malware in sbrugna...
EUVD-2002-2300
Malware in sbrugna...
EUVD-2017-2815
Malware in sbrugna...
EUVD-2002-1800
Malware in sbrugna...
EUVD-2017-12027
Malware in sbrugna...
EUVD-2017-2816
Malware in sbrugna...
EUVD-2001-0880
Malware in sbrugna...