CVE-2014-4928: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Invision Power Board aka IPB or IP.Board before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the cId parameter...

Joomla Google Map Landkarten 4.2.3 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Google Map Landkarten = 4.2.3 - SQL Injection Vendor Homepage: http://www.joomla-24.de/ Software Link: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/google-map-landkarten/...

PHP Coupon Script 6.0 - 'cid' SQL Injection

Exploit Title: PHP Coupon Script 6.0 - 'cid' Parameter SQL Injection Dork: N/A Date: 21.08.2017 Vendor Homepage: http://www.couponscript.com/ Software Link: http://www.couponscript.com/ Demo: http://www.couponscript.com/demo/ Version: 6.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A...

SQL injection vulnerability in products.php page cid parameter of Shenzhou Tongda website builder system

ShenZhouTongDa network building system is a website building system. A SQL injection vulnerability exists in the cid parameter on the products.php page of the website builder system. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL injection vulnerability of cid parameter in category.control.mydecms.php page of Xiancheng website builder system

Xiancheng building system is a set of PHP + mysql architecture with free open source article management system program. Xiancheng website building system category.control.mydecms.php page cid parameter SQL injection vulnerability. As the system fails to effectively filter the data submitted by th...

SQL injection vulnerability in the cid parameter of list.php page of JiuJiu website builder system

Daqing JiuJiu Network Technology Co., Ltd. is a technical service enterprise diversified in the field of full network marketing, enterprise e-commerce, network information technology services. There is a SQL injection vulnerability in the cid parameter of the list.php page of the JiuJiu network...

CVE-2017-8763

Cross-site scripting XSS vulnerability in modules/Base/Box/checkfornewversion.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URI that lacks the cid parameter...

CVE-2017-8763

Cross-site scripting XSS vulnerability in modules/Base/Box/checkfornewversion.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URI that lacks the cid parameter...

PT-2017-18512

Name of the Vulnerable Software and Affected Versions EPESI versions 1.8.2 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URI that lacks the cid parameter. Recommendations For EPESI versions 1.8.2 and earlier, ...

SQL injection vulnerability in cid parameter of Fangfa CMS FcontentAction.class.php page

Fangfa CMS is a scalable web content management software. A SQL injection vulnerability exists in the cid parameter of the Fangfa CMS V4.0 FcontentAction.class.php page, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in cid and keyword parameters of KenCMS V1.1 Enterprise Membership Experience Edition System

KenCMS is a content management system. A SQL injection vulnerability exists in the KenCMS V1.1 Enterprise Member Experience system. The lack of filtering of the 'cid' and 'keyword' parameters allows an attacker to exploit the vulnerability to obtain sensitive information from the database...

Joomla com_jdownloads component 'cid' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'cid' parameter of the Joomla comjdownloads component. An attacker can exploit the vulnerability to access or modify database data...

Joomla com_digistore component 'cid' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'cid' parameter of the Joomla comdigistore component. An attacker can exploit the vulnerability to access or modify database data...

Joomla com_djcatalog2 component 'cid' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'cid' parameter of the Joomla comdjcatalog2 component. An attacker can exploit the vulnerability to access or modify database data...

rosettastone.com XSS vulnerability

Vulnerable URL: http://www.rosettastone.com/?cid='"--!confirmOPENBUGBOUNTY...

SQL injection vulnerability in the cid parameter of OpenCourse_new.aspx page of the CMS system of the resource management platform of Beijing Hanboer Information Technology Co.

Resource Management Platform CMS is a comprehensive management and application platform based on the cloud service system, through a multi-layer system architecture, establishing a multi-level cloud platform and cloud application environment covering provinces, municipalities, counties, schools a...

seeklearning.com.au XSS vulnerability

Vulnerable URL: https://www.seeklearning.com.au/providers?cid=...

Days Bo online training system network school Edition Course_Class_List_Default. aspx the parameter cid SQL injection vulnerability

No description provided by source...

WordPress Download Manager Plugin <= 2.2.2 - XSS

This plugin is prone to admin.php cid parameter cross site scripting vulnerability. Solution Update the plugin...

CVE-2015-2183

Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow remote administrators to execute arbitrary SQL commands via the id parameter in a 1 disporders detail or 2 subadminmgt edit action or 3 cid parameter in an editcurrency action to admin/...