EyesOfNetwork web interface 'user_name' parameter SQL injection vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides business process configuration tools, generating pop-up windows when events occur in the active queue, etc. EyesOfNetwork web interface aka eonweb is one of the web interfaces. A SQL injection vulnerability...

EyesOfNetwork web interface include/function.php file SQL injection vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides business process configuration tools, generating pop-up windows when events occur in the active queue, etc. EyesOfNetwork web interface aka eonweb is one of the web interfaces. A SQL injection vulnerability...

EyesOfNetwork web interface 'term' parameter SQL injection vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides business process configuration tools, generating pop-up windows when events occur in the active queue, etc. EyesOfNetwork web interface aka eonweb is one of the web interfaces. A SQL injection vulnerability...

SugarCRM Documents and Emails Module SQL Injection Vulnerability

SugarCRM is the United States SugarCRM company's set of open source customer relationship management system CRM. Documents and Emails module is one of the modules. documents is a document management module. emails is an e-mail module. A SQL injection vulnerability exists in the Documents and Emai...

Anblik WordPress image-gallery-with-slideshow SQL Injection Vulnerability

Anblik WordPress image-gallery-with-slideshow is a slideshow plugin for WordPress developed by Anblik Web Design India. A SQL injection vulnerability exists in the image-gallery-with-slideshow/adminsetting.php file in Anblik WordPress image-gallery-with-slideshow version 1.5.2. A remote attacker...

CVE-2017-1002023

Vulnerability in wordpress plugin Easy Team Manager v1.3.2, The code does not sanitize id before making it part of an SQL statement in file ./easy-team-manager/inc/easyteammanagerdescedit.php...

CVE-2017-1002027

Vulnerability in wordpress plugin rk-responsive-contact-form v1.0, The variable $delid isn't sanitized before being passed into an SQL query in file ./rk-responsive-contact-form/include/rkuserlist.php...

CVE-2017-1002010

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the deletemedia function...

Cross site scripting

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, There is a stored XSS vulnerability via the $value-galleryname and $value-gallerydescription where anyone with privileges to modify or add galleries/images and inject javascript into the database...

CVE-2017-1002011

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, There is a stored XSS vulnerability via the $value-galleryname and $value-gallerydescription where anyone with privileges to modify or add galleries/images and inject javascript into the database...

CVE-2017-1002011

CVE-2017-1002011 affects the WordPress plugin image-gallery-with-slideshow up to version 1.5.2 . The vulnerability is a stored XSS where an attacker with privileges to modify or add galleries/images can inject JavaScript into the database via the fields $value->gallery_name and $value->gall...

Huawei FusionSphere SQL Injection Vulnerability

Huawei FusionSphere, a product of Huawei, is a cloud operating system product developed based on the OpenStack framework. Huawei FusionSphere suffers from a SQL injection vulnerability due to the program failing to adequately validate device input. An authenticated remote attacker can exploit thi...

Cisco Emergency Responder SQL Injection Vulnerability

Cisco Emergency Responder ER is the United States Cisco Cisco a set of IP communications systems in the emergency call software. The software provides real-time location tracking database and caller location and other features. A SQL injection vulnerability exists in the SQL database interface in...

HelpDEZk SQL Injection Vulnerability

HelpDEZk is a suite of PHP-based software for managing requests and events. The software manages workflow, logging process and maintenance history through a shared service center. A SQL injection vulnerability exists in the app\modules\admin\controllers\loginController.php file in HelpDEZk versio...

Ideagen Easysite SQL Injection Vulnerability

Ideagen Easysite is a web content management system from Ideagen UK. A SQL injection vulnerability exists in the CInfoService.asmx file of WebServices in Ideagen Easysite version 7.0. The vulnerability can be exploited by remote attackers to execute arbitrary SQL commands via a specially crafted...

NexusPHP 'usernw' Parameter SQL Injection Vulnerability

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in NexusPHP version 1.5.beta5.20120707. A remote attacker can exploit this vulnerability by sending the 'usernw' parameter to the nowarn.php file to execute...

NexusPHP linksmanage.php file SQL injection vulnerability

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in NexusPHP version 1.5.beta5.20120707. A remote attacker can exploit this vulnerability by sending the 'id' parameter to the linksmanage.php file to inject...

CVE-2017-14069

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php...

SQL injection vulnerability in cpzs.asp page p_typeid parameter of Xinyuan website builder system

Xinyuan Network Building System is a website building system. SQL injection vulnerability exists in the ptypeid parameter of the cpzs.asp page of the Xinyuan Network website builder system, which can be exploited by an attacker to obtain sensitive information from the database...

SQL injection vulnerability in the nav_id parameter of the arc.php page of the Yuntrun website builder system

Yuntrue United website builder system is a website builder system SQL injection vulnerability exists in the navid parameter on the arc.php page of the Yuntrun website builder system, which can be exploited by attackers to obtain sensitive information from the database...