EasyService Billing Cross-Site Scripting Vulnerability

EasyService Billing is a PHP-based service-oriented consumer business management system . A cross-site scripting vulnerability exists in the 'q' parameter of the jobcard-ongoing.php file in EasyService Billing version 1.0. A remote attacker can exploit this vulnerability to inject arbitrary web...

Appnitro MachForm SQL Injection Vulnerability

Appnitro MachForm is a tool for creating responsive forms in web pages from Appnitro Software Indonesia. A SQL injection vulnerability exists in the download.php file in Appnitro MachForm versions prior to 4.2.3. The vulnerability can be exploited by a remote attacker to browse, add, change, or...

Security update for wireshark (moderate)

This update for wireshark fixes the following issues: Minor vulnerabilities that could be used to trigger dissector crashes or cause excessive memory use by making Wireshark read specially crafted packages from the network or capture files boo1094301: - CVE-2018-11356: DNS dissector crash -...

CVE-2018-6409: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Appnitro MachForm before 4.2.3. The module in charge of serving stored files gets the path from the database. Modifying the name of the file to serve on the corresponding apform table leads to a path traversal vulnerability via the download.php q parameter...

PT-2018-17541

Name of the Vulnerable Software and Affected Versions Appnitro MachForm versions prior to 4.2.3 Description An issue was discovered in Appnitro MachForm. There is a SQL injection vulnerability via the q parameter in the "download.php" endpoint. Recommendations For versions prior to 4.2.3, update ...

CVE-2018-6410: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Appnitro MachForm before 4.2.3. There is a download.php SQL injection via the q parameter...

openSUSE: Security Advisory for wireshark (openSUSE-SU-2018:1428-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2018-17540

Name of the Vulnerable Software and Affected Versions Appnitro MachForm versions prior to 4.2.3 Description An issue was discovered that leads to a path traversal vulnerability. The module responsible for serving stored files retrieves the path from the database. By modifying the file name in the...

EasyService Billing 1.0 - Cross-Site Scripting

!-- Exploit Title: EasyService Billing 1.0 Cross-Site Scripting in 'q' Parameter Date: 25-05-2018 Software Link: https://codecanyon.net/item/easyservice-billing-php-scripts-for-quotation-invoice-payments-etc/16687594 Exploit Author: Divya Jain Version: EasyService Billing 1.0 CVE: CVE-2018-11443...

EasyService Billing 1.0 - Cross-Site Scripting

EasyService Billing 1.0 - Cross-Site Scripting !-- Exploit Title: EasyService Billing 1.0 Cross-Site Scripting in 'q' Parameter Date: 25-05-2018 Software Link: https://codecanyon.net/item/easyservice-billing-php-scripts-for-quotation-invoice-payments-etc/16687594 Exploit Author: Divya Jain Versio...

CVE-2018-11444

A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0...

Cross site scripting

The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0...

Sql injection

A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0...

CVE-2018-11443

The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0...

PT-2018-10574

Name of the Vulnerable Software and Affected Versions EasyService Billing version 1.0 Description A SQL Injection issue was observed in the parameter q in the jobcard-ongoing.php file. Recommendations For EasyService Billing version 1.0, avoid using the parameter q in the affected file until the...

PT-2018-10573

Name of the Vulnerable Software and Affected Versions EasyService Billing version 1.0 Description The issue affects the q parameter in jobcard-ongoing.php, where a Cross-site Scripting problem has been identified. Recommendations For EasyService Billing version 1.0, avoid using the q parameter in...

CVE-2018-11443: Improper Neutralization of Input During Web Page Generation

The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0...

CVE-2018-11444: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0...

Design/Logic Flaw

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup...

CVE-2018-11358

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup...