28 matches found
CVE-2018-6928
PHP Scripts Mall News Website Script 2.0.4 has SQL Injection via a search term...
CVE-2018-6928
CVE-2018-6928 affects PHP Scripts Mall News Website Script 2.0.4, with a SQL Injection vulnerability in the search term parameter. Root cause is improper handling of user input allowing unauthorized SQL execution. Impact per sources is high: potential leakage of data, data alteration, and disrupt...
CVE-2016-6928
CVE-2016-6928 is rejected/not used; this candidate is not associated with a vulnerability.
CVE-2015-6928
CubeCart is affected by a password-reset validation flaw in admin.class.php affecting 5.2.12–5.2.16 and 6.x (before 6.0.7). The issue allows a remote attacker to change the administrator password by sending a recovery request with a space character in the validate parameter and the administrator ...
CVE-2008-6928
CVE-2008-6928 affects PHPStore Complete Classifieds. The vulnerability is an unrestricted file upload that allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct request to classifieds1/yellow_images/....
CVE-2008-6928
creationtimestamp| type| source ---|---|--- 2008-11-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7084...
CVE-2006-6928
CVE-2006-6928 describes multiple cross-site scripting (XSS) vulnerabilities in Rialto 1.6. The issues allow remote attackers to inject arbitrary web script or HTML via: (1) the cat parameter to listmain.asp or searchmain.asp, (2) the Keyword parameter to searchkey.asp, and (3) the refno parameter...