EUVD-2020-26474

Malware in sbrugna...

CVE-2020-5277

PrestaShop module psfacetedsearch versions before 3.5.0 has a reflected XSS with urlname parameter. The problem is fixed in 3.5.0...

CVE-2020-5277: Improper Neutralization of Input During Web Page Generation

PrestaShop module psfacetedsearch versions before 3.5.0 has a reflected XSS with urlname parameter. The problem is fixed in 3.5.0...

CVE-2013-6785: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in urlredirect.cgi in Supermicro IPMI before SMTX9315 allows authenticated attackers to read arbitrary files via the urlname parameter...

CVE-2006-1200: Undefined Security Weakness

Direct static code injection vulnerability in addlink.txt in daverave Link Bank allows remote attackers to execute arbitrary PHP code via the urlname parameter, which is not sanitized before being stored in links.txt, which is later used in an include statement...