Lucene search
+L

313 matches found

0day.today
0day.today
added 2020/08/19 12:0 a.m.293 views

Pharmacy Medical Store And Sale Point 1.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Title: Pharmacy Medical Store and Sale Point 1.0 - 'catid' SQL Injection Exploit Author: Moaaz Taha 0xStorm Vendor Homepage: https://www.sourcecodester.com/php/14398/pharmacymedical-store-sale-point-using-phpmysql-bootstrap-framework.html...

7.4AI score
Exploits0
CNVD
CNVD
added 2018/08/14 12:0 a.m.4 views

OpenEMR SQL Injection Vulnerability (CNVD-2018-17436)

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. Multiple SQL injection vulnerabilities exist in the...

9.8CVSS10AI score0.02198EPSS
Exploits1References1
CNVD
CNVD
added 2018/04/17 12:0 a.m.6 views

iScripts eSwap cross-site scripting vulnerability (CNVD-2018-07983)

IScripts eSwap is an item trading program from IScripts Inc. that supports the use of virtual currency or direct item exchange. The program supports the use of virtual currencies for trading or direct item exchange.User Panel is one of the user panels. A cross-site scripting vulnerability exists ...

6.1CVSS6AI score0.00692EPSS
Exploits1References1
OSV
OSV
added 2018/04/16 6:29 p.m.5 views

CVE-2018-10135

iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel...

6.1CVSS5.8AI score0.00692EPSS
Exploits1References1
NVD
NVD
added 2018/04/16 6:29 p.m.15 views

CVE-2018-10135

iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel...

6.1CVSS6AI score0.00692EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/04/16 5:0 p.m.25 views

CVE-2018-10135

iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel...

6AI score0.00692EPSS
Exploits1References1
OSV
OSV
added 2018/02/17 7:29 a.m.8 views

CVE-2018-5974

SQL Injection exists in the SimpleCalendar 3.1.9 component for Joomla! via the catid array parameter...

9.8CVSS5.8AI score0.02703EPSS
Exploits5References1
NVD
NVD
added 2017/07/24 12:29 a.m.21 views

CVE-2017-11583

dayrui FineCms 5.0.9 has SQL Injection via the catid parameter in an action=related request to libraries/Template.php...

9.8CVSS9.9AI score0.01137EPSS
Exploits1References1
Prion
Prion
added 2017/07/24 12:29 a.m.16 views

Sql injection

dayrui FineCms 5.0.9 has SQL Injection via the catid parameter in an action=related request to libraries/Template.php...

7.5CVSS9.8AI score0.01137EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2017/07/24 12:29 a.m.7 views

CVE-2017-11583

dayrui FineCms 5.0.9 has SQL Injection via the catid parameter in an action=related request to libraries/Template.php...

9.8CVSS5.8AI score0.01137EPSS
Exploits1References1
CNVD
CNVD
added 2017/07/24 12:0 a.m.2 views

Finecms foreground catid parameter has SQL injection vulnerability

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. An SQL injection vulnerability exists in the frontend catid parameter of finecms. An attacker can exploit this vulnerability to obtain database information...

8AI score
Exploits0
CVE
CVE
added 2017/07/24 12:0 a.m.49 views

CVE-2017-11583

FineCMS 5.0.9 has a SQL injection in libraries/Template.php via the catid parameter in an action=related request. Impact per CNVD/NVD records includes potential disclosure of all databases. No patch version or remediation is explicitly provided in the connected documents. Exploitation details are...

9.8CVSS9.8AI score0.01137EPSS
Exploits1References1Affected Software1
CNVD
CNVD
added 2017/07/24 12:0 a.m.6 views

FineCms SQL Injection Vulnerability (CNVD-2017-18531)

FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A SQL injection vulnerability exists in FineCms version 5.0.9. A remote attacker can exploit this vulnerability to obtain all databases with the help of the 'catid' parameter in the...

9.8CVSS8AI score0.01137EPSS
Exploits1References1
Cvelist
Cvelist
added 2017/07/24 12:0 a.m.27 views

CVE-2017-11583

dayrui FineCms 5.0.9 has SQL Injection via the catid parameter in an action=related request to libraries/Template.php...

9.9AI score0.01137EPSS
Exploits1References1
CNVD
CNVD
added 2017/04/03 12:0 a.m.4 views

SQL Injection Vulnerability in UReader Digital Library System browse.php Page

UReader Digital Library UReader Digital Library is a comprehensive platform for providing e-books in original foreign languages. A SQL injection vulnerability exists in the UReader Digital Library browse.php page. The vulnerability is caused by not filtering the 'catid' parameter effectively, whi...

7.8AI score
Exploits0
CNVD
CNVD
added 2017/02/27 12:0 a.m.2 views

Joomla com_fsf component 'catid' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'catid' parameter of the Joomla comfsf component. An attacker can exploit the vulnerability to access or modify database data...

8AI score
Exploits0References1
Openbugbounty
Openbugbounty
added 2016/09/12 3:2 p.m.11 views

obi.at XSS vulnerability

Vulnerable URL: http://www.obi.at/bk/html/index.html?catId="...

6.9AI score
Exploits0
seebug.org
seebug.org
added 2016/05/23 12:0 a.m.37 views

MallBuilder /cate_show_ajax.php catid参数 SQL注入

No description provided by source...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2015/09/25 12:0 a.m.27 views

Joomla Spider Random Article Component - SQL Injection

Exploit Title : Joomla Spider Random Article Component SQL Injection vulnerability Author : Jagriti Sahu AKA Incredible Vendor Link : http://demo.web-dorado.com/spider-random-article.html Date : 22/03/2015 Discovered at : IndiShell Lab Love to : error1046 ^^ ,Team IndiShell,Codebreaker ICA...

8.4AI score
Exploits0
CNVD
CNVD
added 2015/03/06 12:0 a.m.5 views

ETouch Systems SamePage Enterprise Edition SQL Injection Vulnerability

ETouch Systems SamePage Enterprise Edition is an enterprise version of the Wiki WiKi solution for wikis and blogs from ETouch Systems, USA. The solution supports team collaboration, role management and document management. An SQL injection vulnerability exists in ETouch Systems SamePage Enterpris...

7.5CVSS8.5AI score0.02397EPSS
Exploits1References1
Rows per page
Query Builder