CVE-2017-6490

Multiple Cross-Site Scripting XSS issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data cid, value, element, mode, tab, formname, id passed to the EPESI-master/modules/Utils/RecordBrowser/grid.php URL. An attacker could execute...

PT-2017-17105

Name of the Vulnerable Software and Affected Versions EPESI version 1.8.1.1 Description Multiple Cross-Site Scripting XSS issues were discovered due to insufficient filtration of user-supplied data, such as visible, tab, and cid, passed to the "/EPESI-master/modules/Utils/RecordBrowser/Filters/sa...

PT-2017-17107

Name of the Vulnerable Software and Affected Versions EPESI version 1.8.1.1 Description Multiple Cross-Site Scripting XSS issues were discovered due to insufficient filtration of user-supplied data passed to the "EPESI-master/modules/Utils/RecordBrowser/grid.php" URL. An attacker could execute...

PT-2017-17108

Name of the Vulnerable Software and Affected Versions EPESI version 1.8.1.1 Description Multiple Cross-Site Scripting XSS issues were discovered due to insufficient filtration of user-supplied data, specifically tooltip id, callback, args, and cid, passed to the...

PT-2017-17106

Name of the Vulnerable Software and Affected Versions EPESI version 1.8.1.1 Description Multiple Cross-Site Scripting XSS issues were discovered due to insufficient filtration of user-supplied data passed to the "EPESI-master/modules/Utils/Watchdog/subscribe.php" URL. The vulnerable parameters...

PT-2017-17104

Name of the Vulnerable Software and Affected Versions EPESI version 1.8.1.1 Description Multiple Cross-Site Scripting XSS issues were discovered due to insufficient filtration of user-supplied data passed to the "EPESI-master/modules/Utils/RecordBrowser/favorites.php" URL. An attacker could execu...

CVE-2017-6487: Improper Neutralization of Input During Web Page Generation

Multiple Cross-Site Scripting XSS issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data state, element, id, tab, cid passed to the "EPESI-master/modules/Utils/RecordBrowser/favorites.php" URL. An attacker could execute arbitrary HT...

Joomla com_jdownloads component 'cid' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'cid' parameter of the Joomla comjdownloads component. An attacker can exploit the vulnerability to access or modify database data...

Joomla com_digistore component 'cid' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'cid' parameter of the Joomla comdigistore component. An attacker can exploit the vulnerability to access or modify database data...

Joomla com_djcatalog2 component 'cid' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'cid' parameter of the Joomla comdjcatalog2 component. An attacker can exploit the vulnerability to access or modify database data...

rosettastone.com XSS vulnerability

Vulnerable URL: http://www.rosettastone.com/?cid='"--!confirmOPENBUGBOUNTY...

SQL injection vulnerability in the cid parameter of OpenCourse_new.aspx page of the CMS system of the resource management platform of Beijing Hanboer Information Technology Co.

Resource Management Platform CMS is a comprehensive management and application platform based on the cloud service system, through a multi-layer system architecture, establishing a multi-level cloud platform and cloud application environment covering provinces, municipalities, counties, schools a...

seeklearning.com.au XSS vulnerability

Vulnerable URL: https://www.seeklearning.com.au/providers?cid=...

Days Bo online training system network school Edition Course_Class_List_Default. aspx the parameter cid SQL injection vulnerability

No description provided by source...

CVE-2014-9746

CVE-2014-9746 affects FreeType before 2.5.4. The functions t1_parse_font_matrix (type1/t1load.c), cid_parse_font_matrix (cid/cidload.c), t42_parse_font_matrix (type42/t42parse.c), and ps_parser_load_field (psaux/psobjs.c) do not check return values, enabling potential denial of service via uninit...

Heap-buffer-overflow in cid_parser_new

Project: https://github.com/freetype/freetype2-testing.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4855783254654976 Fuzzer: libFuzzerfreetype2fuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address:...

WordPress Download Manager Plugin <= 2.2.2 - XSS

This plugin is prone to admin.php cid parameter cross site scripting vulnerability. Solution Update the plugin...

PT-2015-3532

Name of the Vulnerable Software and Affected Versions ClipBucket versions 2.6 Revision 738 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via various parameters in different actions to "ajax.php", including the uid parameter in an...

CVE-2015-2183

Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow remote administrators to execute arbitrary SQL commands via the id parameter in a 1 disporders detail or 2 subadminmgt edit action or 3 cid parameter in an editcurrency action to admin/...

CVE-2015-2183: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow remote administrators to execute arbitrary SQL commands via the id parameter in a 1 disporders detail or 2 subadminmgt edit action or 3 cid parameter in an editcurrency action to admin/...