CVE-2019-13472: Improper Neutralization of Input During Web Page Generation

PHPWind 9.1.0 has XSS vulnerabilities in the c and m parameters of the index.php file...

FreshRSS Cross-Site Scripting Vulnerability

FreshRSS is an open source, self-hosted RSS aggregator with support. A cross-site scripting vulnerability exists in FreshRSS version 1.11.1. A remote attacker can exploit the vulnerability to inject arbitrary web script or HTML with the help of 'c' or 'a' parameter...

CVE-2018-19782: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in GET requests in FreshRSS 1.11.1 allow remote attackers to inject arbitrary web script or HTML via the 1 c parameter or 2 a parameter...

YzmCMS Cross-Site Scripting Vulnerability

YzmCMS is an open source CMS Content Management System developed by Chinese programmer Yuan Zhimeng. A cross-site scripting vulnerability exists in YzmCMS. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML with the help of 'a', 'c' or 'm' parameters...

CVE-2018-7653: Improper Neutralization of Input During Web Page Generation

In YzmCMS 3.6, index.php has XSS via the a, c, or m parameter...

phpBB Minerva Mod SQL Injection Vulnerability

phpBB is a popular forum program. A SQL injection vulnerability exists in phpBB Minerva Mod, which allows remote attackers to inject malicious sql commands via the vulnerable 'c' parameter to corrupt web applications or dbms...

Dropbear SSH Arbitrary Code Execution Vulnerability

Dropbear is a relatively small SSH server and client. An arbitrary code execution vulnerability exists in Dropbear dbclient, which can be exploited by a remote attacker to execute arbitrary code when a local dbclient user enters a specific -m or -c parameter...

CVE-2015-2209

DLGuard 4.5 allows remote attackers to obtain the installation path via the c parameter to index.php...

CVE-2015-2209: Exposure of Sensitive Information to an Unauthorized Actor

DLGuard 4.5 allows remote attackers to obtain the installation path via the c parameter to index.php...

CVE-2015-2066: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in DLGuard 4.5 allows remote attackers to execute arbitrary SQL commands via the c parameter to index.php...

DLGuard 4.5 Path Disclosure

DLGuard Full Path Disclosure Information Leakage Security Vulnerabilities Exploit Title: DLGuard /index.php c parameter Full Path Disclosure Security Vulnerabilities Product: DLGuard Vendor: DLGuard Vulnerable Versions: v4.5 Tested Version: v4.5 Advisory Publication: Feb 18, 2015 Latest Update: F...

Sql injection

Multiple SQL injection vulnerabilities in u5CMS before 3.9.4 allow remote attackers to execute arbitrary SQL commands via the name parameter to 1 copy2.php, 2 localize.php, 3 metai.php, 4 nc.php, 5 new2.php, or 6 rename2.php in u5admin/; 7 c parameter to u5admin/editor.php; 8 typ parameter to...

CVE-2014-100011: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in /send-to in Sendy 1.1.9.1 allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2014-9003: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Lantronix xPrintServer allows remote attackers to hijack the authentication of administrators for requests that modify configuration, as demonstrated by executing arbitrary commands using the c parameter in the rpc action...

CVE-2014-9002: Undefined Security Weakness

Lantronix xPrintServer does not properly restrict access to ips/, which allows remote attackers to execute arbitrary commands via the c parameter in an rpc action...

CVE-2013-4789: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules/rss/rss.php in Cotonti before 0.9.14 allows remote attackers to execute arbitrary SQL commands via the "c" parameter to index.php...

CVE-2010-5062: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.php in MH Products kleinanzeigenmarkt allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2010-2095: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2009-4807: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Graugon PHP Article Publisher 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 c parameter to index.php and the 2 id parameter to view.php...

PT-2010-1396 · Maxdev · Mforum

Name of the Vulnerable Software and Affected Versions: MDForum module versions 2.x through 2.07 for MAXdev MDPro Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the c parameter in the "index.php" endpoint. Recommendations: For MDFor...