EUVD-2010-2349

Malware in sbrugna...

CVE-2018-10554: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Nagios XI 5.4.13. There is XSS exploitable via CSRF in 1 the Schedule New Report screen via the hour, minute, or ampm parameter, related to components/scheduledreporting; 2 includes/components/xicore/downtime.php, related to the updatepages function; 3 the ajaxhelper.ph...

Sql injection

SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids parameter in an updatepages action...

CVE-2010-2339: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids parameter in an updatepages action...