74 matches found
PT-2018-13508
Name of the Vulnerable Software and Affected Versions SeaCMS version 6.61 Description The issue is related to a problem where an attacker can execute arbitrary code via the v content parameter in the admin video.php file, which is linked to the site name. Recommendations For SeaCMS version 6.61,...
PT-2018-12503
Name of the Vulnerable Software and Affected Versions SeaCMS version 6.61 Description The issue allows for remote code execution by inserting PHP code into a movie picture address, also referred to as v pic, in the /admin/admin video.php or /backend/admin video.php endpoint. This inserted code is...
hadjiyiannis.net XSS vulnerability
Open Bug Bounty ID: OBB-610802 Description| Value ---|--- Affected Website:| hadjiyiannis.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
profitwizardpro.com XSS vulnerability
Open Bug Bounty ID: OBB-569595 Description| Value ---|--- Affected Website:| profitwizardpro.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
PT-2017-15077
Name of the Vulnerable Software and Affected Versions Readymade Video Sharing Script affected versions not specified Description The issue is related to SQL Injection, which can occur via the chnlid parameter in the "viewsubs.php" endpoint or the search parameter in the "search video.php" endpoin...
PT-2017-14883
Name of the Vulnerable Software and Affected Versions FS IMDB Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain PHP files. The vulnerable parameters are f in 'movie.php', s in 'tvshow.php', and id in 'show misc video.php'...
coyhwh.com XSS vulnerability
Vulnerable URL: http://www.coyhwh.com/en/video.php?play=1/-///'/"//--...
garnstudio.com XSS vulnerability
Vulnerable URL: http://www.garnstudio.com/video.php/'"--!...
PT-2014-8825
Name of the Vulnerable Software and Affected Versions Apptha WordPress Video Gallery contus-video-gallery plugin version 2.5 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via the videoadssearchQuery parameter to API endpoints such as...
CVE-2014-9098: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Apptha WordPress Video Gallery contus-video-gallery plugin 2.5, possibly before 2014-07-23, for WordPress allow remote authenticated users to inject arbitrary web script or HTML via the videoadssearchQuery parameter to 1...
Woltlab Burning Board FLVideo Addon (video.php, value param) - SQL Injection
No description provided by source...
FineCMS 2.3.x 本地文件包含漏洞
简要描述： FineCMS2.3.x版本一文件中存在本地文件包含漏洞。需要在能截断的环境中使用。 详细说明： palyer/video.php player目录下的video.php 中存在本地文件包含漏洞（必须能支持截断的环境才能使用）。漏洞形成原因见 video.php 的98到100行代码。 $filename='./Models/'.$type.'Model.php'; iffileexists$filename includeonce$filename; 其中$type=$GET'vtype'; 漏洞证明： 在windows环境中测试的。...
CVE-2014-1906: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 m parameter to lbstatus.php; 2 msg parameter to vcchatlog.php; n parameter to 3 channel.php, ...
PT-2014-3328
Name of the Vulnerable Software and Affected Versions S3 Video plugin versions prior to 0.983 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML. The vulnerability is specifically in the base parameter ...
PT-2012-4044
Name of the Vulnerable Software and Affected Versions ar web content manager AWCM version 2.2 Description The issue allows remote attackers to cause a denial of service due to disk consumption. This can be achieved by submitting a large number of comment records through HTTP requests to specific...
PT-2012-5026
Name of the Vulnerable Software and Affected Versions Decoda versions prior to 3.3.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the video directive in the decoda/templates/video.php file. Recommendations For versions prior to...
CVE-2012-3830: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in decoda/templates/video.php in Decoda before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via the video directive...
CVE-2012-3831: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in decoda/templates/video.php in Decoda before 3.3.1 allows remote attackers to inject arbitrary web script or HTML via multiple URLs in an img tag...
