CVE-2024-2351

A vulnerability classified as critical was found in CodeAstro Ecommerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file action.php of the component Search. The manipulation of the argument catid/brandid/keyword leads to sql injection. The attack can be launched...

Ecommerce-Website SQL Injection Vulnerability

Ecommerce-Website is a complete e-commerce website with an administration panel built using PHP and MySql. A SQL injection vulnerability exists in Ecommerce-Website version 1.0, which stems from the parameter catid/brandid/keyword in the file action.php that can lead to SQL injection...

The vulnerability in the action.php web application used for creating medical certificates in the Medical Certificate Generator App allows a violator to execute arbitrary SQL code.

The vulnerability of the action.php web application used for creating medical certificates in the Medical Certificate Generator App is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code remotely...

CVE-2024-0468

A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/action/new-father.php. The manipulation of the argument image leads to unrestricted upload. The attack can...

PT-2024-15585 · Unknown · Code-Projects Fighting Cock Information System

Name of the Vulnerable Software and Affected Versions: code-projects Fighting Cock Information System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /admin/action/new-father.php. The manipulation of the image argument leads t...

PT-2023-28316 · Douhaocms · Douhaocms

Name of the Vulnerable Software and Affected Versions: DouHaocms version 3.3 Description: A Cross Site Request Forgery CSRF issue allows a remote attacker to execute arbitrary code via the adminAction.class.php file. This can be exploited to perform unauthorized actions on the affected system...

PT-2023-17082 · Sourcecodester · Sourcecodester Medical Certificate Generator App

Name of the Vulnerable Software and Affected Versions: SourceCodester Medical Certificate Generator App version 1.0 Description: A critical issue has been discovered, affecting the action.php file, where the manipulation of the id argument leads to SQL injection. This can be initiated remotely...

Prison Management System SQL注入漏洞

Prison Management System is a prison management system by Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the application /pms/admin/actions/manageaction. php in the id parameter lack of SQL data filter escaping, an attack...

CVE-2022-23899

MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via search.do in the file /web/MCmsAction.java...

PT-2022-15923

Name of the Vulnerable Software and Affected Versions taoCMS version 3.0.2 Description An issue in taoCMS allows for an arbitrary file read, enabling access to any files. This is achieved via the "admin.php" endpoint with specific parameters: action set to "file", ctrl set to "download", and path...

RockOA SQL注入漏洞

RockOA Xinhuo is an open source office OA system. Rockoa v1.8.7 version of the existence of SQL injection vulnerability , the vulnerability customerAction.php in the filtering parameter does not do effective filtering of user input , a remote attacker through the injection of SQL statements to...

CVE-2019-7361

An attacker may convince a victim to open a malicious action micro .actm file that has serialized data, which may trigger a code execution in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018,...

PT-2018-14707

Name of the Vulnerable Software and Affected Versions nc-cms versions prior to 2017-03-10 Description The issue allows remote attackers to execute arbitrary PHP code via the "Upload File or Image" feature. This can be achieved by uploading a file with a .php filename and setting the Content-Type ...

CVE-2018-17138

The Jibu Pro plugin through 1.7 for WordPress is prone to Stored XSS via the wp-content/plugins/jibu-pro/quizaction.php name aka Quiz Name field...

CVE-2012-5642

server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsafe behavior in a custom action file via unspecified symbols in this content...

CVE-2012-5642

server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsafe behavior in a custom action file via unspecified symbols in this content...

CVE-2012-5642

server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsafe behavior in a custom action file via unspecified symbols in this content...

CVE-2012-5642

server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsafe behavior in a custom action file via unspecified symbols in this content...

PT-2012-6066

Name of the Vulnerable Software and Affected Versions Fail2ban versions prior to 0.8.8 Description The issue is related to the handling of the content of the matches tag in the server/action.py file. This might allow remote attackers to trigger unsafe behavior in a custom action file via...