189 matches found
CVE-2020-23979
13enforme CMS 1.0 has SQL Injection via the 'content.php' id parameter...
CVE-2020-23976
Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id parameter...
PT-2020-15613
Name of the Vulnerable Software and Affected Versions 13enforme CMS version 1.0 Description The issue concerns a Cross Site Scripting problem. It can be exploited via the id parameter in the "content.php" file. Recommendations For 13enforme CMS version 1.0, avoid using the id parameter in the...
PT-2020-15611
Name of the Vulnerable Software and Affected Versions 13enforme CMS version 1.0 Description The issue is related to SQL Injection, which occurs via the id parameter in the 'content.php' file. Recommendations For 13enforme CMS version 1.0, consider restricting access to the 'content.php' file or t...
CVE-2020-23981: Improper Neutralization of Input During Web Page Generation
13enforme CMS 1.0 has Cross Site Scripting via the "content.php" id parameter...
CVE-2020-23976: Improper Neutralization of Special Elements used in an SQL Command
Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id parameter...
CVE-2020-23979: Improper Neutralization of Special Elements used in an SQL Command
13enforme CMS 1.0 has SQL Injection via the 'content.php' id parameter...
PT-2020-6753
Name of the Vulnerable Software and Affected Versions Webexcels Ecommerce CMS versions 2.x, 2017, 2018, 2019, 2020 Description The issue is related to a SQL Injection vulnerability via the id parameter in the content.php script. This vulnerability is due to a lack of protection measures for the S...
CVE-2019-16988
In FusionPBX up to v4.5.7, the file app\basicoperatorpanel\resources\content.php uses an unsanitized "eavesdropdest" variable coming from the URL, which is reflected on 3 occasions in HTML, leading to XSS...
CVE-2019-16988
In FusionPBX up to v4.5.7, the file app\basicoperatorpanel\resources\content.php uses an unsanitized "eavesdropdest" variable coming from the URL, which is reflected on 3 occasions in HTML, leading to XSS...
CVE-2019-16988: Improper Neutralization of Input During Web Page Generation
In FusionPBX up to v4.5.7, the file app\basicoperatorpanel\resources\content.php uses an unsanitized "eavesdropdest" variable coming from the URL, which is reflected on 3 occasions in HTML, leading to XSS...
PT-2019-14909 · Fusionpbx · Fusionpbx
Name of the Vulnerable Software and Affected Versions: FusionPBX versions prior to 4.5.8 Description: The issue concerns the use of an unsanitized eavesdrop dest variable in the content.php file, which is reflected in HTML and leads to a cross-site scripting XSS issue. This allows for potential...
CVE-2015-9269
The export/content.php exportarticle feature in the wordpress-mobile-pack plugin before 2.1.3 2015-06-03 for WordPress allows remote attackers to obtain sensitive information because the content of a privately published post is sent in JSON format...
CVE-2015-9269: Exposure of Sensitive Information to an Unauthorized Actor
The export/content.php exportarticle feature in the wordpress-mobile-pack plugin before 2.1.3 2015-06-03 for WordPress allows remote attackers to obtain sensitive information because the content of a privately published post is sent in JSON format...
CVE-2017-17570
FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php florig or fldest parameter...
Sql injection
FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php florig or fldest parameter...
CVE-2017-17570
FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php florig or fldest parameter...
CVE-2017-17570
FS Expedia Clone 1.0 is affected by a SQL injection vulnerability in input parameters to pages.php (id), content.php (id) and show-flight-result.php (fl_orig, fl_dest). The issue stems from unsanitized user input in SQL queries, enabling remote attackers to inject commands. Public reports (Exploi...
PT-2017-14865
Name of the Vulnerable Software and Affected Versions FS Expedia Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain pages. The vulnerable parameters include id in "pages.php" or "content.php", and fl orig or fl dest in...
CVE-2017-17570: Improper Neutralization of Special Elements used in an SQL Command
FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php florig or fldest parameter...