EUVD-2026-90570

The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'x attacker-chosen name matching the form's url. predefined value' parameter in all versions up to, and includin...

CVE-2026-100179 Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Parameter via setChoices()

The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'x any URL parameter consumed by the form's calculated equation' parameter in all versions up to, and including,...

CVE-2026-100184: Improper Neutralization of Input During Web Page Generation

The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'x attacker-chosen name matching the form's url. predefined value' parameter in all versions up to, and includin...

CVE-2026-100179: Improper Neutralization of Input During Web Page Generation

The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'x any URL parameter consumed by the form's calculated equation' parameter in all versions up to, and including,...

EUVD-2009-1066

Malware in sbrugna...

EUVD-2006-7153

Malware in sbrugna...

74CMS SQL Injection Vulnerability (CNVD-2021-43389)

74CMS is a talent recruitment system based on the second development of ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can exploit this vulnerability to inject SQL statements via the x parameter of plus/ajaxstreet.php...

CVE-2020-22208

SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...

PT-2021-3358

Name of the Vulnerable Software and Affected Versions 74cms version 3.2.0 Description The issue is related to a lack of protection against SQL query structure exploitation in the ajax officebuilding.php component of the 74cms system. This can allow a remote attacker to execute arbitrary SQL queri...

PT-2021-3360

Name of the Vulnerable Software and Affected Versions 74cms version 3.2.0 Description The issue is related to a lack of protection against SQL query structure attacks in the plus/ajax street.php component of the 74cms system. This can be exploited by a remote attacker to execute arbitrary SQL...

CVE-2020-22208: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...

CVE-2020-22210: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in 74cms 3.2.0 via the x parameter to ajaxofficebuilding.php...

PT-2017-17683

Name of the Vulnerable Software and Affected Versions Pixie version 1.0.4 Description The issue allows for an XSS attack through the admin/index.php endpoint with specific settings. The attack is facilitated by the s and x parameters. Recommendations For Pixie version 1.0.4, as a temporary...

CVE-2009-3184: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in Pirates of The Caribbean in the E-Gold Game Series allow remote attackers to execute arbitrary SQL commands via the 1 x and 2 y parameters...

CVE-2009-1067: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to inject arbitrary web script or HTML via the x parameter...

CVE-2009-1065: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands via the x parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-7171: Improper Input Validation

productreview.php in Koan Software Mega Mall allows remote attackers to obtain the installation path via a request with an empty value of the x parameter...

CVE-2006-1561: Undefined Security Weakness

SQL injection vulnerability in index.php in vscripts aka Kuba Kunkiewicz VBook aka VBook 2.0 allows remote attackers to execute arbitrary SQL commands via the x parameter...

CVE-2005-2673: Undefined Security Weakness

SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers to execute arbitrary SQL commands via the 1 x or 2 y parameters...