Joomla Component XMap SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla component XMap. The flaw is due to input passed to 'index.php' via the 'view=' and 'itemID=' parameters failing to be properly filtered before being used in SQL queries. An attacker could...

DEBIAN-CVE-2019-7339

POST - Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'level' parameter value in the view log log.php because proper filtration is omitted...

DEBIAN-CVE-2019-6777

An issue was discovered in ZoneMinder v1.32.3. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter...

CVE-2018-5331

Discuz! DiscuzX X3.4 has XSS via the view parameter to include/space/spacepoll.php, as demonstrated by a mod=space do=poll request to home.php...

CVE-2018-5331

Discuz! DiscuzX X3.4 has XSS via the view parameter to include/space/spacepoll.php, as demonstrated by a mod=space do=poll request to home.php...

Design/Logic Flaw

Discuz! DiscuzX X3.4 has XSS via the view parameter to include/space/spacepoll.php, as demonstrated by a mod=space do=poll request to home.php...

CVE-2018-5331

Discuz! DiscuzX X3.4 is affected by a cross-site scripting (XSS) vulnerability triggered by the view parameter sent to include/space/space_poll.php, demonstrated by a mod=space do=poll request to home.php. Multiple connected sources document the issue, but none provide exploit steps or concrete r...

CVE-2018-5331

Discuz! DiscuzX X3.4 has XSS via the view parameter to include/space/spacepoll.php, as demonstrated by a mod=space do=poll request to home.php...

PT-2018-16900

Name of the Vulnerable Software and Affected Versions DiscuzX version X3.4 Description The issue concerns a cross-site scripting XSS problem. It can be triggered via the view parameter in the include/space/space poll.php file. An example of exploitation is a request to home.php with mod=space and...

CVE-2018-5331: Improper Neutralization of Input During Web Page Generation

Discuz! DiscuzX X3.4 has XSS via the view parameter to include/space/spacepoll.php, as demonstrated by a mod=space do=poll request to home.php...

Muslim Matrimonial Script Cross-Site Scripting Vulnerability (CNVD-2018-01241)

Muslim Matrimonial Script is a community matrimonial script for matrimonial websites by PHP Scripts Mall. A cross-site scripting vulnerability exists in PHP Scripts Mall Muslim Matrimonial Script. The vulnerability can be exploited to conduct cross-site scripting attacks via the admin/stateview.p...

Code injection

PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter...

PHP Scripts Mall Professional Service Script Cross-Site Scripting Vulnerability

Professional Service Script is a script from PHP Scripts Mall with search, task creation and task management features. A cross-site scripting vulnerability exists in PHP Scripts Mall Professional Service Script. A remote attacker can exploit this vulnerability via the view parameter in...

CVE-2017-17929: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter...

PT-2017-15106

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. The problem is exploited through the view parameter in the...

PT-2017-6329

Name of the Vulnerable Software and Affected Versions Fiyo CMS version 2.0.1.8 Description The issue allows remote attackers to bypass intended access restrictions. This can be achieved by executing specific functions, such as the "Install and Update" or Backup super administrator function, via t...

CVE-2014-9148: Improper Access Control

Fiyo CMS 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the 1 "Install and Update" or 2 Backup super administrator function via the view parameter in a direct request to fiyo/dapur...

phpMyBackupPro path traversal vulnerability (CNVD-2017-30647)

phpMyBackupPro is a free web-based MySql backup tool. The tool supports automatic backup, timed backup, off-site backup MySql database. A directory traversal vulnerability exists in the getfile.php file in phpMyBackupPro versions 2.1 through 2.5. A remote attacker can read arbitrary files with th...

phpMyBackupPro Path Traversal Vulnerability

phpMyBackupPro is a free web-based MySql backup tool. The tool supports automatic backup, timed backup, off-site backup MySql database. A directory traversal vulnerability exists in the getfile.php file in phpMyBackupPro versions 2.1 through 2.4. A remote attacker can read arbitrary files with th...

Directory traversal

Directory traversal vulnerability in getfile.php in phpMyBackupPro 2.1 through 2.5 allows remote attackers to read arbitrary files via a .. dot dot in the view parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this...