Lucene search
K

24 matches found

CVE
CVE
added 2026/02/03 12:15 p.m.7 views

CVE-2025-6397

The CVE-2025-6397 entry corresponds to an XSS in Ankara Hosting Website Design Website Software, specifically a Reflected XSS due to improper neutralization of input during web page generation. The PT-2026-5942 detail identifies the affected software as Ankara Hosting Website Design Website Softw...

8.6CVSS5.3AI score0.00064EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/03 12:15 p.m.2 views

CVE-2025-6397

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ankara Hosting Website Design Website Software allows Reflected XSS.This issue affects Website Software: through 03022026. NOTE: The vendor was contacted early about this disclosure but did...

8.6CVSS5.3AI score0.00064EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/03 12:15 p.m.2 views

CVE-2025-6397 XSS in Ankara Hosting's web site

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ankara Hosting Website Design Website Software allows Reflected XSS.This issue affects Website Software: through 03022026. NOTE: The vendor was contacted early about this disclosure but did...

8.6CVSS5.3AI score0.00064EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/03 12:0 a.m.3 views

Ankara Host Website Software 跨站脚本漏洞

Ankara Host Website Software is a web design software developed by Ankara Host in Turkey. Versions of Ankara Host Website Software prior to 03022026 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper input during web page generation, and could lead to...

8.6CVSS5.7AI score0.00064EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/03 12:0 a.m.1 views

PT-2026-5942

Name of the Vulnerable Software and Affected Versions Ankara Hosting Website Design Website Software version 03022026 Description The software contains a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows an attacker to inject...

8.6CVSS5.4AI score0.00064EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-11865

Malicious code in bioql PyPI...

7.3CVSS6.5AI score0.00194EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/09/26 2:12 p.m.5 views

CVE-2025-6396 XSS in Webbeyaz's web site

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Webbeyaz Website Design Website Software allows Cross-Site Scripting XSS.This issue affects Website Software: through 2025.07.14...

6.1CVSS0.00027EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/26 2:12 p.m.1 views

CVE-2025-6396 XSS in Webbeyaz's web site

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Webbeyaz Website Design Website Software allows Cross-Site Scripting XSS.This issue affects Website Software: through 2025.07.14...

6.1CVSS5.5AI score0.00027EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/26 12:0 a.m.2 views

PT-2025-39645

Name of the Vulnerable Software and Affected Versions Webbeyaz Website Design Website Software versions through 2025.07.14 Description A flaw exists in Webbeyaz Website Design Website Software that allows for Cross-Site Scripting XSS. This issue is due to improper neutralization of input during w...

6.1CVSS5.8AI score0.00027EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/09/26 12:0 a.m.1 views

Webbeyaz Website Software 跨站脚本漏洞

Webbeyaz Website Software is a platform for building websites from the Turkish company Webbeyaz. A cross-site scripting vulnerability exists in Webbeyaz Website Software version 2025.07.14 and earlier, which stems from improper input neutralization during web page generation and could lead to...

6.1CVSS5.9AI score0.00027EPSS
Exploits0References1
exploitpack
exploitpack
added 2017/03/01 12:0 a.m.11 views

Meme Maker Script 2.1 - user SQL Injection

Meme Maker Script 2.1 - user SQL Injection Exploit Title: Meme Maker Script 2.1 - SQL Injection Google Dork: N/A Date: 01.03.2017 Vendor Homepage: http://www.memesoftware.com/ Software: http://www.memesoftware.com/mememaker.php Demo: http://www.memefaces.me/ Version: 2.1 Tested on: Win7 x64, Kali...

0.6AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.16 views

Cyclope Employee Surveillance Solution 6.0 6.1.0 6.2.0 - Multiple Vulnerabilities

No description provided by source. Author: loneferret of Offensive Security Product: Cyclope Employee Surveillance Solution v6.0 Version: 6.1.0 & 6.2.0 Vendor Site: http://www.cyclope-series.com/ Software Download: http://www.cyclope-series.com/download/index.html Software description: The employ...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2010/07/05 12:0 a.m.35 views

Bs Realtor_Web Script - SQL Injection

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs RealtorWeb Script Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL :http://www.brotherscripts.com/ Price:$24.95 Author : Sid3^effects aKa...

7.4AI score
Exploits0
securityvulns
securityvulns
added 2010/03/21 12:0 a.m.91 views

Vbulletin 4.0.2 XSS Vulnerability

================================= Vbulletin 4.0.2 XSS Vulnerability ================================= + Vbulletin 4.0.2 XSS Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 1 / / 0 0...

1.4AI score
Exploits0
securityvulns
securityvulns
added 2007/12/13 12:0 a.m.46 views

SQL MKPortal M1.1 Rc1

: Discovery by: Sw33t h4cK3r : POWERED BY: MKPortal M1.1 ----------- Exploit : http://Example.com/index.php?ind=gallery&op=fotoshow&ida=sql...

0.2AI score
Exploits0
securityvulns
securityvulns
added 2006/11/05 12:0 a.m.36 views

SIMPLOG 0.9.3 injection sql & multiple xss

SIMPLOG 0.9.3 cms website : http://www.simplog.org/ xss: Administration Panel - user.php Name URL Email API Key Flickr Email Flickr Password - news.php URL - edit.php Title Entry Manual TrackBack = risk very low SimpLog User Part...

0.3AI score
Exploits0
NVD
NVD
added 2006/11/01 12:7 a.m.11 views

CVE-2006-5636

PHP remote file inclusion vulnerability in common.php in Simple Website Software SWS 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SWSDIR parameter...

5.1CVSS7.6AI score0.18264EPSS
Exploits1References8
CVE
CVE
added 2006/11/01 12:0 a.m.41 views

CVE-2006-5636

CVE-2006-5636 describes a PHP remote file inclusion vulnerability in the file common.php of Simple Website Software (SWS) 0.99 and earlier. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the SWSDIR parameter, enabling remote code execution on affected servers...

5.1CVSS8AI score0.18264EPSS
Exploits1References8Affected Software1
Cvelist
Cvelist
added 2006/11/01 12:0 a.m.13 views

CVE-2006-5636

PHP remote file inclusion vulnerability in common.php in Simple Website Software SWS 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SWSDIR parameter...

7.6AI score0.18264EPSS
Exploits1References8
seebug.org
seebug.org
added 2006/10/30 12:0 a.m.24 views

Simple Website Software 0.99 (common.php) File Include Vulnerability

No description provided by source. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Script: Simple Website Software v0.99 common.php Remote File Include =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Found:...

7.1AI score
Exploits0
Rows per page
Query Builder