2102 matches found
Information disclosure
MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to obtain sensitive database information via vectors involving templates...
CVE-2016-9410
MyBB aka MyBulletinBoard before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to obtain sensitive database information via vectors involving templates...
SQL Injection Vulnerability in the 'id[]' Parameter of Business Easy CMS
Shangyi CMS, or 31cms for short, is a drop-in microsoft public platform management system. A SQL injection vulnerability exists in Business Easy CMS. The lack of filtering of the 'id' parameter allows attackers to exploit the vulnerability to obtain sensitive information about the database...
SQL Injection Vulnerability in YunGouCMS shopid
YunGouCMS is a website builder provided by Taurus Networks for the cloud purchasing model. YunGouCMS suffers from a SQL injection vulnerability. The lack of filtering of user input in the shopid parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...
Joomla com_blog_calendar SQL injection vulnerability
A SQL Injection Vulnerability has been discovered in the Joomla Module called comblogcalendar. The Vulnerability is located in the index.php?option=comblogcalendar&modid=xxx Parameter. Attackers are able to execute own SQL commands by usage of a GET Method Request with manipulated modid Value...
SQL Injection Vulnerability in YzmCMS /member/account.php Page
YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS /member/account.php page has a SQL injection vulnerability. Because the /member/account.php page does not filter parameters, an...
SQL Injection Vulnerability in YzmCMS email.php
YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. A SQL injection vulnerability exists in YzmCMS email.php. An attacker can exploit the vulnerability to obtain sensitive information...
SQL Injection Vulnerability in Mito MetInfo V5.3 Backend
MetInfo is an enterprise website management system with PHP Mysql architecture. A SQL injection vulnerability exists in the backend of MetInfo V5.3. Due to the lack of filtering of the class1 parameter, which allows attackers to exploit the vulnerability to obtain sensitive database information...
SQL Injection Vulnerability in BageCms
BageCms is a multi-functional open source web content management system based on php5+mysql5 development. BageCms suffers from a SQL injection vulnerability. The lack of filtering of the 'title' parameter allows attackers to exploit the vulnerability to obtain sensitive database information...
BigTree CMS SQL Injection Vulnerability
BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A SQL injection vulnerability exists in versions of Bigtree Cms prior to 4.1.16, which stems from the program failing to adequately filter user-submitted input. An attacker can...
OIC Exponent CMS SQL Injection Vulnerability (CNVD-2016-11171)
OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability...
Microsoft SQL Server Multiple Vulnerabilities (MS16-136)
Microsoft SQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Schoolhos CMS 2.29 Multiple vulnerabilities / RCE Exploit
Exploit for php platform in category web applications \x0d\x0a-----------------------------26518470919255\x0d\x0a\x0d\x0a' \ 'http://HOST/PATH/elearningku/proses.php?pilih=guru&untukdi=upload' php file...
CVE-2016-9282
SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via action=search&module=search with the searchstring parameter...
Sql injection
SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via address/addContentToSearch/id/ and a trailing string, related to a "sef URL" issue...
Sql injection
SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via action=search&module=search with the searchstring parameter...
CVE-2016-9282
SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via action=search&module=search with the searchstring parameter...
CVE-2016-9282
SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via action=search&module=search with the searchstring parameter...
CVE-2016-9283
SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via address/addContentToSearch/id/ and a trailing string, related to a "sef URL" issue...