MSVOD 10 - cid SQL Injection

MSVOD 10 - cid SQL Injection Exploit Title: MSVOD V10 ¡V SQL Injection Google Dork: inurl:"images/lists?cid=13" Date: 2018/07/17 Exploit Author: Hzllaga Vendor Homepage: http://www.msvod.cc/ Version: MSVOD V10 CVE : CVE-2018-14418 Reference : https://www.wtfsec.org/2583/msvod-v10-sql-injection/...

PT-2018-12499

Name of the Vulnerable Software and Affected Versions Msvod Cms version 10 Description The issue exists due to SQL Injection via an images/lists?cid= URI. Recommendations For Msvod Cms version 10, avoid using the cid parameter in the images/lists endpoint until the issue is resolved...

CVE-2018-14418: Improper Neutralization of Special Elements used in an SQL Command

In Msvod Cms v10, SQL Injection exists via an images/lists?cid= URI...

Travel Agency 1.1 - cid SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Travel Agency 1.1 - 'cid' SQL Injection Exploit Author: Ashkan Moghaddas Vulnerable Page: /add.city.php Vulnerable Source: Line20:ifisset$GET'action' && $GET'action' == 'del' Line21:$delete = mysqlquery"DELETE FROM destination...

Travel Agency 1.1 - 'cid' SQL Injection

Travel Agency 1.1 - 'cid' SQL Injection. Webapps exploit for PHP platform Exploit Title: Travel Agency 1.1 - 'cid' SQL Injection Data: 2018-06-23 Exploit Author: Ashkan Moghaddas Tested on: Windows - Linux Google Dork: N/A CVE: N/A Vulnerable Page: /add.city.php Vulnerable Source:...

Joomla! Component EkRishta 2.10 - cid SQL Injection

Joomla! Component EkRishta 2.10 - cid SQL Injection Exploit Title: Joomla! Component Ek Rishta 2.10 - SQL Injection Dork: N/A Date: 08.06.2018 Vendor Homepage: https://www.joomlaextensions.co.in/ Software Link: https://extensions.joomla.org/extension/ek-rishta/ Version: 2.10 Tested on: WiN7x64/...

PHPMyWind Cross-Site Scripting Vulnerability (CNVD-2018-15387)

PHPMyWind is a PHP + MySQL based development , W3C compliant site building engine for enterprise-level site building . A cross-site scripting vulnerability exists in PHPMyWind version 5.5. A remote attacker can exploit this vulnerability by sending the 'cid' parameter to the newsshow.php page or ...

CVE-2018-11487

PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php...

CVE-2018-11487

PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php...

CVE-2018-11487: Improper Neutralization of Input During Web Page Generation

PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php...

PT-2018-10604

Name of the Vulnerable Software and Affected Versions PHPMyWind version 5.5 Description The issue concerns a security problem where an attacker can inject malicious code. This is possible through the cid parameter to the "newsshow.php" endpoint, or the query string to the "news.php" or "about.php...

CVE-2018-9993: Improper Neutralization of Input During Web Page Generation

YUNUCMS 1.0.7 has XSS via the content title on an admin/content/addcontent/cid/ page aka a news center page...

Invision Power Services Invision Power Board SQL Injection Vulnerability

Invision Power Services Invision Power Board IPB or IP.Board is a PHP and MySQL based web forum program from Invision Power Services. The program makes it easy to create and manage online forums. A SQL injection vulnerability exists in Invision Power Services IPB. A remote attacker can exploit th...

Sql injection

SQL injection vulnerability in Invision Power Board aka IPB or IP.Board before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the cId parameter...

CVE-2014-4928

SQL injection vulnerability in Invision Power Board aka IPB or IP.Board before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the cId parameter...

PT-2018-4229

Name of the Vulnerable Software and Affected Versions Invision Power Board versions prior to 3.4.6 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cId parameter. Recommendations For versions prior to 3.4.6, update to version 3.4.6 or later...

CVE-2014-4928: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Invision Power Board aka IPB or IP.Board before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the cId parameter...

PT-2018-17531

Name of the Vulnerable Software and Affected Versions Google Map Landkarten versions through 4.2.3 Description The issue exists due to SQL Injection in the Google Map Landkarten component for Joomla. This can be exploited via the cid or id parameter in a "layout=form markers" action, or the map...

CVE-2018-6396: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a layout=formmarkers action, or the map parameter in a layout=default action...

Joomla Google Map Landkarten 4.2.3 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Google Map Landkarten = 4.2.3 - SQL Injection Vendor Homepage: http://www.joomla-24.de/ Software Link: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/google-map-landkarten/...