CVE-2014-4932

Cross-site scripting XSS vulnerability in the Wordfence Security plugin before 5.1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the val parameter to whois.php...

CVE-2014-4932: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Wordfence Security plugin before 5.1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the val parameter to whois.php...

PT-2018-4230

Name of the Vulnerable Software and Affected Versions Wordfence Security plugin versions prior to 5.1.5 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the val parameter to the "whois.php" endpoint. Recommendations For versions prior...

joyplus-cms SQL Injection Vulnerability

joyplus-cms joy video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . A SQL injection vulnerability exists in joyplus-c...

CVE-2018-14389

joyplus-cms 1.6.0 has SQL Injection via the manager/adminajax.php val parameter...

CVE-2018-14389

joyplus-cms 1.6.0 has SQL Injection via the manager/adminajax.php val parameter...

CVE-2018-14389

joyplus-cms 1.6.0 has SQL Injection via the manager/adminajax.php val parameter...

CVE-2018-14389

joyplus-cms 1.6.0 has SQL Injection via the manager/adminajax.php val parameter...

PT-2018-12483

Name of the Vulnerable Software and Affected Versions joyplus-cms version 1.6.0 Description The issue is related to SQL Injection, which can be exploited via the val parameter in the "manager/admin ajax.php" API endpoint. Recommendations For joyplus-cms version 1.6.0, avoid using the val paramete...

CVE-2018-14389: Improper Neutralization of Special Elements used in an SQL Command

joyplus-cms 1.6.0 has SQL Injection via the manager/adminajax.php val parameter...

oniguruma: Heap buffer overflow in next_state_val() during regular expression compilation

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write or read occurs in nextstateval during regular expression compilation. Octal numbers larger than 0xff are not handled correctly in fetchtoken and...

CVE-2018-10083

CMS Made Simple CMSMS through 2.2.7 contains an arbitrary file deletion vulnerability in the admin dashboard via directory traversal sequences in the val parameter within a cmd=del request, because code under modules\FilePicker does not restrict the val parameter...

CVE-2018-10083: Improper Limitation of a Pathname to a Restricted Directory

CMS Made Simple CMSMS through 2.2.7 contains an arbitrary file deletion vulnerability in the admin dashboard via directory traversal sequences in the val parameter within a cmd=del request, because code under modules\FilePicker does not restrict the val parameter...

val-ledourner.com XSS vulnerability

Open Bug Bounty ID: OBB-523961 Description| Value ---|--- Affected Website:| val-ledourner.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

val-deco.com XSS vulnerability

Open Bug Bounty ID: OBB-472629 Description| Value ---|--- Affected Website:| val-deco.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-17637

CVE-2017-17637 affects Car Rental Script 2.0.4 with an SQL Injection in the countrycode1.php file via the val parameter. Multiple sources (NVD, CNVD, CVE lists, related CNVD and PRION records) corroborate a vulnerability in this script where user-supplied input is used in SQL without proper sanit...

PT-2017-14933

Name of the Vulnerable Software and Affected Versions Car Rental Script version 2.0.4 Description The issue is related to SQL Injection, which occurs via the val parameter in the countrycode1.php file. Recommendations For Car Rental Script version 2.0.4, avoid using the val parameter in the...

CVE-2017-17637: Improper Neutralization of Special Elements used in an SQL Command

Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter...

CVE-2016-4296

When opening a Hangul Hcell Document .cell and processing a record that uses the CSSValFormat object, Hancom Office 2014 will search for an underscore "" character at the end of the string and write a null terminator after it. If the character is at the very end of the string, the application wil...

libdwarf heap buffer overflow vulnerability (CNVD-2016-10045)

libdwarf is a set of tools for reading and writing DWARF2 debugging information. A heap buffer overflow vulnerability exists in the libdwarf function dwarfgetsizeofval, which can be exploited by an attacker to execute arbitrary code...