TSiteBuilder SQL Injection Vulnerability

TSiteBuilder is a set of tools for building websites, mainly for creating HTML-based websites. A SQL injection vulnerability exists in TSiteBuilder version 1.0. A remote attacker can exploit the vulnerability by sending the 'id' parameter to the /site.php, /pagelist.php, or /pagenew.php files to...

CVE-2018-6365

SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /pagenew.php...

Sql injection

SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /pagenew.php...

CVE-2018-6365

SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /pagenew.php...

CVE-2018-6365

The CVE-2018-6365 issue affects TSiteBuilder 1.0, where an SQL injection vulnerability arises via the id parameter in /site.php, /pagelist.php, or /page_new.php. The root cause is improper handling of the id input allowing command injection into the database query, enabling an attacker to manipul...

CVE-2018-6365: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /pagenew.php...

TSiteBuilder 1.0 - SQL Injection

Exploit Title: TSiteBuilder 1.0 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://www.datacomponents.net/ Software Link: http://www.datacomponents.net/products/website/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsan Sencan Author Web...

PmWiki 2.2.34 /scripts/pagelist.php 代码执行漏洞

No description provided by source...

CVE-2011-4453: Improper Control of Generation of Code

The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitrary code via PHP sequences in a crafted order parameter in a pagelist directive, leading to unintended use of the PHP createfunction function...