CVE-2021-31858

DotNetNuke DNN 9.9.1 CMS is vulnerable to a Stored Cross-Site Scripting vulnerability in the user profile biography section which allows remote authenticated users to inject arbitrary code via a crafted payload...

EUVD-2019-18452

Malware in sbrugna...

EUVD-2005-0900

Malware in sbrugna...

EUVD-2025-21227

Malicious code in bioql PyPI...

Default configuration

A user changing their email after signing up and verifying it can change it without verification in profile settings. The configuration option "verifyemailenabled" will only validate email only on sign up...

PT-2023-22202 · Xwiki · Xwiki

Name of the Vulnerable Software and Affected Versions: XWiki versions prior to 14.8RC1 Description: The HTML macro in XWiki does not properly neutralize script-related HTML tags, allowing any user who can use the HTML macro to introduce an XSS attack. This is particularly dangerous in a standard...

OctoberCMS Cross-Site Scripting

Cross-Site Scripting exists in OctoberCMS 1.0.425 aka Build 425, allowing a least privileged user to upload an SVG file containing malicious code as the Avatar for the profile. When this is opened by the Admin, it causes JavaScript execution in the context of the Admin account...

Enthrallweb eNews 1.0 - Remote User Pass Change Exploit

No description provided by source. form action=target/classifieds/myprofile.asp method=POST name=form2 User Id: input type=text name=MMrecordId value=1 p /p table align=center cellpadding=1 cellspacing=1 tr valign=baseline td align=right nowrap class=titlestrongfont face=Verdana, Arial, Helvetica...

OpenDB 1.0.6 - user_profile.php?redirect_url Cross-Site Scripting

OpenDB 1.0.6 - userprofile.php?redirecturl Cross-Site Scripting source: https://www.securityfocus.com/bid/30989/info Open Media Collectors Database OpenDb is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may levera...

sql injection in phpbb

I found a vulnerability en phpbb 2.0.5 and prior, is probably also affect 2.0.6 this bug don't affect to version 2.0.7 phpbb have a list of registereds users, when you click on a memebr of this list, you are requesting data to the database for example:...