SQL injection vulnerability in ad***_jq***.php file de*** method in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adjq.php file de method there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

SQL injection vulnerability in ad***_ne***.php file re*** method in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adne.php file re method there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

SQL injection vulnerability in ad***_ne***.php file mo*** parameters in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adne.php file mo parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

Code execution vulnerability in ad***_we***.php file ur*** parameter in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adwe.php file ur parameter there is a code execution vulnerability, attackers can use the vulnerability to obtain control of the web server...

SQL injection vulnerability in ad***_to***.php file pi*** parameter in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adto.php file pi parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

Apple Removes 17 Malicious iOS Apps From App Store

Researchers have uncovered 17 apps on Apple’s official App Store infected with malware. Apple has since removed the apps from the App Store – but a “significant” number of iOS users could have installed them, researchers said. Once downloaded, the malicious apps infect victims with a trojan...

Cross site request forgery (csrf)

The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php...

CVE-2015-9497

The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php...

CVE-2015-9497

Affected : WordPress with the Ad Inserter plugin (before 1.5.3). Vulnerability : CSRF that enables a resultant XSS via wp-admin/options-general.php?page=ad-inserter.php. Impact : allows an attacker to cause cross-site scripting and potentially manipulate admin actions; CVSS details show high impa...

SQL Injection Vulnerability in zhicms Background ad***.php Page

ZhiCms is an enterprise building system based on PHP and mysql technology. A SQL injection vulnerability exists in the ad.php page in the background of zhicms, which can be exploited by attackers to obtain sensitive information such as database...

CVE-2015-9497: Cross-Site Request Forgery (CSRF)

The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php...

PT-2019-7456

Name of the Vulnerable Software and Affected Versions ad-inserter plugin versions prior to 1.5.3 Description The issue concerns a CSRF vulnerability with resultant XSS in the ad-inserter plugin for WordPress. This can be exploited via the "wp-admin/options-general.php?page=ad-inserter.php"...

WordPress ad-inserter plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ad-inserter is an ad management plugin used in it. A cross-site request forgery vulnerability exists in WordPress ad-inserter plugin...

YouPHPTube /plugin/AD_Server/view/campaignsVideos.json.php id SQL injection vulnerability

Summary An exploitable SQL injection vulnerability exists in the authenticated part of YouPHPTube 7.6. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...

SUSE SLES12 Security Update : sudo (SUSE-SU-2019:2668-1)

This update for sudo provides the following fix : Security issue fixed : CVE-2019-14287: Fixed an issue where a user with sudo privileges that allowed them to run commands with an arbitrary uid, could run commands as root, despite being forbidden to do so in sudoers bsc1153674. Other issues fixed...

PT-2019-15232

Name of the Vulnerable Software and Affected Versions 74CMS version 5.2.8 Description An issue was discovered that allows SQL Injection, generated by the list method in the Common/Controller/BackendController.class.php file via the index.php?m=Admin&c=Ad&a=category API endpoint, specifically...

CVE-2019-17612: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in 74CMS v5.2.8. There is a SQL Injection generated by the list method in the Common/Controller/BackendController.class.php file via the index.php?m=Admin&c=Ad&a=category sort parameter...

ad-ops.hu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-993517 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting ad-ops.hu website and its...

SQL injection vulnerability in seacms backend ad***_co***.php page (CNVD-2019-41068)

seacms ocean video management system, ocean cms is a video-on-demand system based on PHP + MySql technology. There is a SQL injection vulnerability in the adco.php page in the background of seacms. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL injection vulnerability in seacms backend ad***_co***_ne***.php page (CNVD-2019-41062)

seacms ocean video management system, ocean cms is a video-on-demand system based on PHP + MySql technology. seacms background adcone.php page SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...