560 matches found
CVE-2021-27672: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in the "adminboxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to obtain sesnitive database information by injecting SQL commands into the "cID" parameter when creating a new HTML component...
Zenario CMS 跨站脚本漏洞
Zenario CMS is a Zenario open source application . It provides a web-based content management system. A security vulnerability exists in Tribal Systems Zenario CMS v8.8.52729, which can be exploited by a remote attacker to execute arbitrary code by injecting arbitrary HTML in the "cID" parameter...
CVE-2019-16744
eBrigade before 5.0 has evenements.php cid SQL Injection...
SQL Injection Vulnerability in Xi'an Power Infinite Information Technology Co.
Chengdu Power Unlimited Technology Co., Ltd. is an Internet company that builds marketing websites and Internet marketing services for small and medium-sized enterprises. Chengdu Power Infinite Technology Co., Ltd. building system ne.asp page cid parameter exists SQL injection vulnerability,...
Sql injection
CommSy through 8.6.5 has SQL Injection via the cid parameter. This is fixed in 9.2...
CVE-2019-11880
CommSy through 8.6.5 has SQL Injection via the cid parameter. This is fixed in 9.2...
CVE-2019-11880
CVE-2019-11880 affects CommSy
CVE-2019-11880: Improper Neutralization of Special Elements used in an SQL Command
CommSy through 8.6.5 has SQL Injection via the cid parameter. This is fixed in 9.2...
PT-2019-12540
Name of the Vulnerable Software and Affected Versions CommSy versions 8.6.5 and earlier Description The issue is related to SQL Injection via the cid parameter. This allows for potential exploitation. The estimated number of potentially affected devices worldwide is not specified. There is no...
SQL injection vulnerability in the cid parameter of the ne***.asp page of the website builder system of Chengdu Power Infinite Technology Co.
Chengdu Power Unlimited Technology Co., Ltd. is an Internet company that builds marketing websites and Internet marketing services for small and medium-sized enterprises. Chengdu Power Infinite Technology Co., Ltd. building system ne.asp page cid parameter exists SQL injection vulnerability,...
CVE-2019-11452
whatsns 4.0 allows index.php?admincategory/remove.html cid SQL injection...
KORA 2.7.0 - 'cid' SQL Injection
Exploit Title: KORA 2.7.0 - SQL Injection Dork: N/A Date: 2018-10-13 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.matrix.msu.edu/ Software Link: https://sourceforge.net/projects/kora/files/latest/download Version: 2.7.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A POC: 1...
MSVOD 10 - cid SQL Injection
MSVOD 10 - cid SQL Injection Exploit Title: MSVOD V10 ¡V SQL Injection Google Dork: inurl:"images/lists?cid=13" Date: 2018/07/17 Exploit Author: Hzllaga Vendor Homepage: http://www.msvod.cc/ Version: MSVOD V10 CVE : CVE-2018-14418 Reference : https://www.wtfsec.org/2583/msvod-v10-sql-injection/...
PHPMyWind Cross-Site Scripting Vulnerability (CNVD-2018-15387)
PHPMyWind is a PHP + MySQL based development , W3C compliant site building engine for enterprise-level site building . A cross-site scripting vulnerability exists in PHPMyWind version 5.5. A remote attacker can exploit this vulnerability by sending the 'cid' parameter to the newsshow.php page or ...
CVE-2018-11487
PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php...
CVE-2018-11487
PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php...
CVE-2018-11487: Improper Neutralization of Input During Web Page Generation
PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php...
Invision Power Services Invision Power Board SQL Injection Vulnerability
Invision Power Services Invision Power Board IPB or IP.Board is a PHP and MySQL based web forum program from Invision Power Services. The program makes it easy to create and manage online forums. A SQL injection vulnerability exists in Invision Power Services IPB. A remote attacker can exploit th...