Lucene search
K

6 matches found

Positive Technologies
Positive Technologies
added 2026/04/21 12:0 a.m.1 views

PT-2026-33981

In Dolibarr ERP & CRM = 22.0.4, PHP code detection and editing permission enforcement in the Website module is not applied consistently to all input parameters, allowing an authenticated user restricted to HTML/JavaScript editing to inject PHP code through unprotected inputs during website page...

5.8AI score0.00049EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/21 12:0 a.m.2 views

CVE-2026-31018

In Dolibarr ERP & CRM = 22.0.4, PHP code detection and editing permission enforcement in the Website module is not applied consistently to all input parameters, allowing an authenticated user restricted to HTML/JavaScript editing to inject PHP code through unprotected inputs during website page...

8.8CVSS5.8AI score0.00049EPSS
Exploits0References3
Openbugbounty
Openbugbounty
added 2016/03/22 2:10 p.m.14 views

betashoes.com XSS vulnerability

Vulnerable URL: http://www.betashoes.com/NoAccess.aspx?lang=tr-TR=/new-balance-574%22-alert%28%27XSSPOSED%27%29-%22-beach-cruiser-400310.html Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 21:57 GMT Vulnerability type:| XSS Vulnerability...

6.3AI score
Exploits0
Packet Storm
Packet Storm
added 2011/12/10 12:0 a.m.21 views

LogicMaze WebDesigns SQL Injection

. . . | | | / || | | / \ / | / \ / \ / \ / /| |\ \ | || | / // | | | \ / \ \ | | / \ |||| /\ | / || / \ / || / / / / / / / =========================================================================== Title : LogicMaze WebDesigns SQL Injection Vulnerability Vendor Link: :...

0.3AI score
Exploits0
Packet Storm
Packet Storm
added 2010/12/20 12:0 a.m.29 views

PHP Web Scripts Ad Manager Pro 3 SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /, /\L\ \ /\L\ \///'/' \ \ \ \ 1 3 //\ //\ Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail :...

0.5AI score
Exploits0
NVD
NVD
added 2007/07/30 5:30 p.m.12 views

CVE-2007-4078

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Text Ads Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 r parameter to a forgotuid.php, the 2 query or 3 sk parameter to b searchresults.php, or 4 the pageId parameter to c websitepage.php...

4.3CVSS5.8AI score0.00517EPSS
Exploits1References5
Rows per page
Query Builder