105 matches found
PT-2018-14009
Name of the Vulnerable Software and Affected Versions Super Cms Blog Pro version 1.0 Description A SQL Injection issue exists in the authors post.php file of Super Cms Blog Pro, specifically via the author parameter. Recommendations For Super Cms Blog Pro version 1.0, consider restricting access ...
CyberLink LabelPrint Buffer Overflow Vulnerability
CyberLink LabelPrint is a fast and easy to use CD-ROM labeling software that supports the latest lightscribe CD-ROM cover burning technology. A stack buffer overflow vulnerability exists in CyberLink LabelPrint version 2.5. A remote attacker can use the 'author', 'artist', 'artist' or ' default'...
CVE-2016-7781
SQL injection vulnerability in framework/modules/blog/controllers/blogController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the author parameter...
CVE-2016-7781: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in framework/modules/blog/controllers/blogController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the author parameter...
PT-2017-9338
Name of the Vulnerable Software and Affected Versions Exponent CMS versions 2.3.9 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the author parameter in the blogController.php file, which is part of the...
atarimagazines.com XSS vulnerability
Vulnerable URL: http://www.atarimagazines.com/compute/index/index.php?author=Sheldon+Leemon'"--!alert/OPENBUGBOUNTY/...
Exponent CMS 'author' Parameter SQL Injection Vulnerability
Exponent CMS is a free, open source PHP-based modular content management system CMS of the U.S. OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. Exponent CMS version 2.3.9 suffers from a...
CVE-2014-4545
Multiple cross-site scripting XSS vulnerabilities in pqdialog.php in the Pro Quoter plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 leftorright or 2 author parameter...
CVE-2014-4545: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in pqdialog.php in the Pro Quoter plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 leftorright or 2 author parameter...
PT-2013-1542
Name of the Vulnerable Software and Affected Versions Wikidforum version 2.10 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters, including the search field,...
CVE-2010-1877: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the JTM Reseller comjtm component 1.9 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the author parameter in a search action to index.php...
CVE-2009-4104
SQL injection vulnerability in Lyften Designs LyftenBloggie comlyftenbloggie component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the author parameter to index.php...
CVE-2009-4104: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Lyften Designs LyftenBloggie comlyftenbloggie component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the author parameter to index.php...
Cross site scripting
Cross-site scripting XSS vulnerability in picture.php in PhpWebGallery 1.7.0, when Comments for all is enabled, allows remote attackers to inject arbitrary web script or HTML via the author parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...
CVE-2007-5012
Cross-site scripting XSS vulnerability in picture.php in PhpWebGallery 1.7.0, when Comments for all is enabled, allows remote attackers to inject arbitrary web script or HTML via the author parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...
CVE-2007-5012
Cross-site scripting XSS vulnerability in picture.php in PhpWebGallery 1.7.0, when Comments for all is enabled, allows remote attackers to inject arbitrary web script or HTML via the author parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...
CVE-2007-5012: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in picture.php in PhpWebGallery 1.7.0, when Comments for all is enabled, allows remote attackers to inject arbitrary web script or HTML via the author parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...
Sql injection
SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 allows remote attackers to execute arbitrary SQL commands via the author parameter...
CVE-2007-1440: Undefined Security Weakness
SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 allows remote attackers to execute arbitrary SQL commands via the author parameter...