13 matches found
EUVD-2018-10579
Malware in sbrugna...
AbanteCart 跨站脚本漏洞
AbanteCart is AbanteCart open source PHP-based e-commerce platform. A cross-site scripting vulnerability exists in AbanteCart v1.4.0, which stems from the presence of reflective cross-site scripting in the /aboutus parameter, which could lead to the execution of malicious code...
CVE-2021-44317
In Bus Pass Management System v1.0, parameters 'pagedes' and About Us are affected with a Stored Cross-site scripting vulnerability...
CVE-2021-44317
In Bus Pass Management System v1.0, parameters 'pagedes' and About Us are affected with a Stored Cross-site scripting vulnerability...
Cross site scripting
In Bus Pass Management System v1.0, parameters 'pagedes' and About Us are affected with a Stored Cross-site scripting vulnerability...
PT-2021-24080 · Unknown · Bus Pass Management System
Name of the Vulnerable Software and Affected Versions: Bus Pass Management System version 1.0 Description: The issue is related to a Stored Cross-site scripting vulnerability. Parameters pagedes and About Us are affected. Recommendations: For Bus Pass Management System version 1.0, consider...
SQL Injection Vulnerability in us*** Parameters of BioReda's Security Management System Platform
Based on the latest B/S architecture design, Bio Raider Security Management Platform is a digital, networked and security integrated system platform. Bio Raider Security Management System can be applied to government, enterprises, prisons, schools, smart communities and other security requirement...
CVE-2018-18868
No-CMS 1.1.3 is prone to Persistent XSS via a contactus name parameter, as demonstrated by the VG48Z5PqVWname parameter...
CVE-2010-1092
Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the 1 us and 2 ps parameters...
CVE-2010-1092: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the 1 us and 2 ps parameters...
CVE-2008-6798
Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to execute arbitrary SQL commands via 1 the us parameter aka the Username field or 2 the ps parameter aka the Password field...
CVE-2008-6798: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to execute arbitrary SQL commands via 1 the us parameter aka the Username field or 2 the ps parameter aka the Password field...
CVE-2007-0346: Undefined Security Weakness
SQL injection vulnerability in index.php in SmE FileMailer 1.21 allows remote attackers to execute arbitrary SQL commands via the us parameter...