CVE-2024-31009

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php...

CVE-2024-31010

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php...

CVE-2024-31009

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php...

CVE-2024-31010

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php...

CVE-2024-31010

A SQL injection vulnerability exists in SEMCMS v.4.8 due to improper neutralization of special elements in an SQL command. A remote attacker can exploit the ID parameter in the Banner.php file to obtain sensitive information . While no patched version is currently identified, users are advised to...

CVE-2024-31010: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php...

CVE-2024-31009

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php...

CVE-2024-31009

A SQL injection vulnerability exists in SEMCMS v.4.8 . The flaw is triggered via the lgid parameter in the Banner.php file, which allows a remote attacker to obtain sensitive information . To mitigate this risk until a patch is released, it is recommended to restrict access to the Banner.php file...

CVE-2024-31009

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php...

CVE-2024-31009: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php...

CVE-2024-31010

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php...

PT-2024-23721 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SEMCMS version 4.8 Description: The issue allows a remote attacker to obtain sensitive information via the lgid parameter in Banner.php. This is a result of a SQL injection vulnerability. Recommendations: For SEMCMS version 4.8, consider...

bewellbydrfranklipman.com XSS vulnerability

Vulnerable URL: http://www.bewellbydrfranklipman.com/affiliate/scripts/banner.php?aaid=6b660bd9bid=33bbed2f"'--!confirmOPENBUGBOUNTY...

PT-2014-6281

Name of the Vulnerable Software and Affected Versions ol-commerce version 2.1.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters in different PHP files, including the a country parameter in the "affiliate signup.php" file...

Cetera eCommerce - 'banner.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45374/info Cetera eCommerce is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

e107 0.7.x - '/e107_admin/banner.php' SQL Injection

source: https://www.securityfocus.com/bid/39609/info e107 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or...

Sql injection

SQL injection vulnerability in banner.php in Unique Ads UDS 1.x allows remote attackers to execute arbitrary SQL commands via the bid parameter...

CVE-2007-0520

The CVE-2007-0520 entry describes a SQL injection in banner.php of Unique Ads (UDS) 1.x, exploitable via the bid parameter to execute arbitrary SQL commands remotely. This vulnerability is confirmed by multiple sources (NVD entry and related references) and is categorized with network attack vect...

CVE-2007-0520: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in banner.php in Unique Ads UDS 1.x allows remote attackers to execute arbitrary SQL commands via the bid parameter...

Unique Ads - Banner.php SQL Injection

Unique Ads - Banner.php SQL Injection source: https://www.securityfocus.com/bid/22164/info Unique Ads is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...