EUVD-2007-2570

Malware in sbrugna...

CVE-2023-2040

A vulnerability classified as critical has been found in novel-plus 3.6.2. Affected is an unknown function of the file /news/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

Novel-plus SQL injection vulnerability

novel-plus novel boutique-plus is a multi-end PC, WAP reading, functional original literature CMS system. novel-plus version 3.6.2 suffers from a SQL injection vulnerability, which originates from a problem with the file /news/list?limit=10&offset=0&order=desc, where the operation of the paramete...

PT-2023-17436 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: novel-plus version 3.6.2 Description: A critical issue has been discovered, allowing for SQL injection through the manipulation of the sort argument in the "/news/list?limit=10&offset=0&order=desc" API endpoint. This can be exploited remotely...

CVE-2023-2040: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in novel-plus 3.6.2. Affected is an unknown function of the file /news/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

SQL injection vulnerability in the typeId parameter of news_list.jsp file of Shangli K12 digital campus management platform.

Shangli K12 Digital Campus Management Platform is an integrated campus solution. A SQL injection vulnerability exists in the typeId parameter of the newslist.jsp file in the K12 digital campus management platform. The vulnerability is due to the system typeId parameter does not filter the data...

WESPA PHP Newsletter 3.0 Administrator Password Change

"WESPA PHP Newsletter v3.0" Remote Admin Password Change With install path Author: alieye class : remote E-mail: [email protected] greetz: C.S.Eye Security Team members We Are: Alieye , Z0d14c , Bully13 , Stanly , Safety & All Iranian Hackers Site : www.gcmt.vcp.ir , blog : www.cseye.blogfa.com...

CVE-2007-2577: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to execute arbitrary SQL commands via 1 the mode parameter to feeds.php, the 2 formcat parameter to a news/list/index.php or b certain news/details/id/actioncreate/index.php files, or 3 the formmods parameter to...