1496 matches found
SQL Injection Vulnerability in PHPSHE 1.6
PHPSHE mall system combines the functions of product display, online shopping, order management, payment management, article management, customer consultation and feedback to provide users with online shopping mall construction program. A SQL injection vulnerability exists in the pointlog.php fil...
Fedora 27 : libextractor (2017-611d7cc98b)
1.6, multiple security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...
SQL Injection Vulnerability in PHPSHE Online Shopping Mall System
PHPSHE online shopping mall system provides users with a low-cost, high-efficiency online shopping mall construction program. The user.php page in version v1.6 of the PHPSHE online shopping mall system suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain...
PHP Scripts Mall Online Exam Test Application Script SQL Injection Vulnerability
PHP Scripts Mall Online Exam Test Application Script is a PHP based online exam management system from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Online Exam Test Application Script version 1.6. A remote attacker can exploit this vulnerability by sending the...
CVE-2017-17622
Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter...
CVE-2017-17622
CVE-2017-17622 affects Online Exam Test Application Script 1.6 (PHP Scripts Mall India). A SQL injection exists in exams.php via the sort parameter, allowing a remote attacker to inject SQL commands. Exploit details appear in exploit-db (43291). The CNVD entry confirms remote exploitation; no pat...
GNU Libextractor Denial of Service Vulnerability (CNVD-2018-00306)
GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A security vulnerability exists in GNU Libextractor version 1.6. A remote attacker can exploit this vulnerability to cause a denial of service null pointer backreference and application crash...
CVE-2017-17440
GNU Libextractor 1.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted GIF, IT Impulse Tracker, NSFE, S3M Scream Tracker 3, SID, or XM eXtended Module file, as demonstrated by the EXTRACTORxmextractmethod function in...
WordPress User Login History plugin <=1.5 - Multiple Cross-Site Scripting (XSS) vulnerabilities
Multiple Cross-Site Scripting XSS vulnerabilities found in WordPress User Login History plugin versions =1.5. Solution Update the WordPress User Login History plugin to the latest available version at least version 1.6...
Moxa SoftCMS Live Viewer SQL Injection Vulnerability
Moxa SoftCMS Live Viewer is a software package developed by Moxa for remote monitoring and debugging of industrial automation systems. A SQL injection vulnerability exists in Moxa SoftCMS Live Viewer 1.6 and earlier versions. A remote attacker can exploit this vulnerability to access SoftCMS Live...
Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Vulnerabilities (Update A)
OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSMA-17-250-02 Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Vulnerabilities that was published September 7, 2017, on the NCCIC/ICS-CERT web site. Independent researcher Scott Gayou has identified eight...
Moxa SoftCMS Live Viewer SQL Injection Vulnerability
Moxa SoftCMS Live Viewer is a video surveillance software designed for industrial automation systems. A SQL injection vulnerability exists in Moxa SoftCMS Live Viewer 1.6 and earlier versions, which can be exploited by an attacker to access SoftCMS without knowing the user's password...
Synology Video Station Cross-Site Scripting Vulnerability
Synology Video Station is a video manager from Synology, a Chinese company. A cross-site scripting vulnerability exists in Synology Video Station version 1.2 before 1.2-0455, version 1.5 before 1.5-0772, and version 1.6 before 1.6-0847. A remote attacker can exploit this vulnerability to inject...
Design/Logic Flaw
An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ...
DEBIAN-CVE-2017-4966
An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. RabbitMQ management UI stores signed-...
CVE-2017-4967
An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ...
PT-2017-4083 · Pivotal +1 · Rabbitmq +1
Name of the Vulnerable Software and Affected Versions: RabbitMQ versions 3.4.x through 3.5.x and 3.6.x prior to 3.6.9 RabbitMQ for PCF versions 1.5.x and 1.6.x prior to 1.6.18 and 1.7.x prior to 1.7.15 Description: The issue is related to insufficient protection measures in the RabbitMQ managemen...
CVE-2017-9336
The WP Editor.MD plugin 1.6 for WordPress has a stored XSS vulnerability in the content of a post...
Allen Disk Cross-Site Scripting Vulnerability
Allen Disk is a free, open source cloud-based hard disk product that features encrypted file storage, online preview, file sharing and more. A cross-site scripting vulnerability exists in Allen Disk version 1.6. A remote attacker can inject arbitrary web script or HTML by uploading a specially...