SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Paid content will be excluded from the download.

Filter

Matches : 250434

Download | Alert*

dl/dl_sendmail.php in zzcms 8.3 has SQL Injection via the sql parameter.

zzcms 8.3 has stored XSS related to the content variable in user/manage.php and zt/show.php.

zzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI.

An issue was discovered in EMLsoft 5.4.5. XSS exists via the eml/upload/eml/?action=address&do=edit page.

An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=address&do=add page allows CSRF.

An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=user&do=add page allows CSRF.

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.user.php has SQL Injection via the numPerPage parameter.

An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.address.php has SQL Injection via the numPerPage parameter.

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/system.php has XSS.

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/slideshow.php has XSS.

Pages: Start 11270 11271 11272 11273 11274 11275 11276 11277 11278 11279 11280 11281 11282 11283 .. 25043