CVE-2018-6578

SQL Injection exists in the JE PayperVideo 3.0.0 component for Joomla! via the usrplan parameter in a view=myplans&task=myplans.usersubscriptions request...

CVE-2018-6578

CVE-2018-6578 is a SQL injection affecting the Joomla! JE PayperVideo 3.0.0 component. The vulnerability is exploitable via the usr_plan parameter in the request view=myplans&task=myplans.usersubscriptions, enabling an attacker to inject SQL commands. Public references indicate exploitation activ...

CVE-2013-6578

...

CVE-2013-6578

CVE-2013-6578 is rejected and does not correspond to an active vulnerability entry.

CVE-2017-6578

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/subscriberlist.php with the POST Parameter: subscriberemail...

CVE-2017-6578

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/subscriberlist.php with the POST Parameter: subscriberemail...

CVE-2017-6578

CVE-2017-6578 is a SQL injection vulnerability in the WordPress Mail Masta (mail-masta) plugin version 1.0. The issue impacts the plugin’s file ./inc/subscriber_list.php via the POST parameter subscriber_email, potentially enabling arbitrary SQL execution with WordPress admin access. Documented a...

CodeLathe FileCloud is vulnerable to cross-site request forgery

Overview CodeLathe FileCloud, version 13.0.0.32841 and earlier, is vulnerable to cross-site request forgery CSRF. Description CWE-352: Cross-Site Request Forgery CSRF - CVE-2016-6578CodeLathe FileCloud is an "is an Enterprise File Access, Sync and Share solution that runs on-premise." FileCloud,...

CVE-2014-6578

CVE-2014-6578 affects Oracle Database Server Workspace Manager component in Oracle Database versions 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1. The vulnerability allows remote authenticated users to impact confidentiality, integrity, and availability via vectors related to SDO_TOPO and WMSYS.LT....

CVE-2012-6578

Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled with a "Sign by default" queue configuration, uses a queue's key for signing, which might allow remote attackers to spoof messages by leveraging the lack of authentication semantics...

CVE-2012-6578

CVE-2012-6578 affects Best Practical Solutions RT prior to 3.8.15 and 4.0.x prior to 4.0.8 when GnuPG signing is enabled with a "Sign by default" queue configuration. The flaw causes the system to sign messages using a queue’s key, enabling remote attackers to spoof messages due to missing authen...

CVE-2008-6578

Technical details are not publicly available in the provided documents. The connected sources do not specify affected components, root cause, impact, or remediation for CVE-2008-6578. Monitor for updates.

CVE-2007-6578

The CVE-2007-6578 entry documents a SQL injection in the PHP ZLink 0.3 application, specifically in go.php via the id parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, as described in multiple sources (e.g., NVD entry). No mitigation, patch, or affected versi...

CVE-2007-6578

SQL injection vulnerability in go.php in PHP ZLink 0.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6578

CVE-2006-6578 affects Microsoft Internet Information Services (IIS) 5.1, where the IUSR_Machine account can execute non-EXE files (e.g., .COM) in a web directory with certain permissions. This allows attackers to pass arguments to any .COM file that runs those arguments, enabling arbitrary comman...