Drupal 7.x < 7.57 Multiple Vulnerabilities (SA-CORE-2018-001)

According to its self-reported version, the instance of Drupal running on the remote web server is 7.x prior to 7.57. It is, therefore, affected by multiple vulnerabilities : - A flaw exists with the Drupal.checkPlain function due to improper handling of HTML injection. A remote attacker, with a...

CVE-2018-6928

PHP Scripts Mall News Website Script 2.0.4 has SQL Injection via a search term...

CVE-2018-6928

CVE-2018-6928 affects PHP Scripts Mall News Website Script 2.0.4, with a SQL Injection vulnerability in the search term parameter. Root cause is improper handling of user input allowing unauthorized SQL execution. Impact per sources is high: potential leakage of data, data alteration, and disrupt...

CVE-2016-6928

...

CVE-2016-6928

CVE-2016-6928 is rejected/not used; this candidate is not associated with a vulnerability.

CVE-2015-6928

CubeCart is affected by a password-reset validation flaw in admin.class.php affecting 5.2.12–5.2.16 and 6.x (before 6.0.7). The issue allows a remote attacker to change the administrator password by sending a recovery request with a space character in the validate parameter and the administrator ...

CVE-2008-6928

CVE-2008-6928 affects PHPStore Complete Classifieds. The vulnerability is an unrestricted file upload that allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct request to classifieds1/yellow_images/....

CVE-2008-6928

creationtimestamp| type| source ---|---|--- 2008-11-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7084...

CVE-2006-6928

CVE-2006-6928 describes multiple cross-site scripting (XSS) vulnerabilities in Rialto 1.6. The issues allow remote attackers to inject arbitrary web script or HTML via: (1) the cat parameter to listmain.asp or searchmain.asp, (2) the Keyword parameter to searchkey.asp, and (3) the refno parameter...