CVE-2017-14600

Pragyan CMS v3.0 is vulnerable to an Error-Based SQL injection in cms/admin.lib.php via $GET'delblack', resulting in Information Disclosure...

Malicious Package

Overview vue-admin-lib is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

PT-2021-11766

Name of the Vulnerable Software and Affected Versions: FDCMS aka Fangfa Content Management System version 4.0 Description: The issue is related to a front-end SQL injection in FDCMS. This occurs via the Admin/Lib/Action/FloginAction.class.php file. Recommendations: For FDCMS version 4.0, update t...

CVE-2020-35441: Improper Neutralization of Special Elements used in an SQL Command

FDCMS aka Fangfa Content Management System 4.0 contains a front-end SQL injection via Admin/Lib/Action/FloginAction.class.php...

Sql injection

admin/Lib/Action/FpluginAction.class.php in FDCMS aka Fangfa Content Manage System 4.2 allows SQL Injection...

PT-2019-9390

Name of the Vulnerable Software and Affected Versions FDCMS version 4.2 Description The issue allows SQL Injection in FDCMS. This is due to a problem in the admin/Lib/Action/FpluginAction.class.php file. Recommendations For FDCMS version 4.2, update to a newer version that contains a fix for this...

CVE-2009-1066: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the referral function in admin/lib/liblogs.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header in a request...

PT-2007-1946 · Phpadsnew · Openads

Name of the Vulnerable Software and Affected Versions: Openads aka phpAdsNew version 2.0.7 Description: Multiple PHP remote file inclusion issues allow remote attackers to execute arbitrary PHP code via a URL in the 1 phpAds geoPlugin parameter to "libraries/lib-remotehost.inc", the 2 filename...

CVE-2006-6415

CVE-2006-6415 describes a remote file inclusion risk in phpAdsNew 2.0.4-pr2, involving admin/lib-maintenance.inc.php and the phpAds_path parameter. Exploitation would allow remote PHP code execution via a URL. The issue is noted as disputed by CVE, since phpAds_path is used as a constant. Connect...

CVE-2006-6415: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/lib-maintenance.inc.php in phpAdsNew 2.0.4-pr2 allows remote attackers to execute arbitrary PHP code via a URL in the phpAdspath parameter, a different component than CVE-2006-3984. NOTE: this issue is disputed by CVE, since phpAdspath is used as a...