Joomla! Stor for K2 Component SQL Injection Vulnerability

Joomla! is an open source content management system CMS, the system provides RSS feeds, site search and other functions. A SQL injection vulnerability exists in version 3.8.2 of the Joomla! Stor for K2 component. The vulnerability exists because the program fails to adequately filter user-submitt...

WordPress Mail Masta plugin SQL injection vulnerability (CNVD-2017-02398)

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A SQL injection vulnerability exists in the WordPress Mail Masta plugin, which originates when the program fails...

WordPress Mail Masta Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using the PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.Mail Masta Plugin is one of the mail plugin. The Mail Masta Plugin for WordPress suffers from a SQL injection...

GeniXCMS SQL Injection Vulnerability (CNVD-2017-02228)

GeniXCMS is a PHP-based Content Management System and Framework CMSF, a simple and lightweight CMSF that is a starting point for users to build their own online applications, and facilitates the creation of user managers, content managers and menu managers when they are already in place. It is a...

Joomla com_topics component 'id' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comtopics component. An attacker can exploit the vulnerability to access or modify database data...

Joomla Joomloc-CAT component 'ville' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla Joomloc-CAT component 'ville' parameter, which allows remote, unauthenticated attackers to execute arbitrary SQL commands via the parameter...

Joomla EShop component 'id' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla EShop component, which allows remote, unauthenticated attackers to execute arbitrary SQL commands via the parameter...

DEBIAN-CVE-2016-10134

SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggleids array parameter in latest.php...

Joomla onisQuotes Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla onisQuotes component. An attacker can exploit the vulnerability to access or modify database data...

Joomla JE K2 Multiple Form Story Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla JE K2 Multiple Form Story component, which can be exploited by attackers to access or modify database data...

Joomla JE Auto Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla JE Auto component, which can be exploited by attackers to access or modify database data...

Joomla onisMusic Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla onisMusic component. An attacker can exploit the vulnerability to access or modify database data...

Joomla JE Tour Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla JE Tour component. An attacker can exploit the vulnerability to access or modify database data...

Joomla com_joominaflileselling component SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla comjoominaflileselling component. An attacker can exploit the vulnerability to access or modify database data...

SQL Injection Vulnerability in Campus Card System of Harbin Xinzhongxin Electronics Co.

Harbin Xinzhongxin Electronic Co., Ltd Campus Card System is a digital campus solution. A SQL injection vulnerability exists in the fjid parameter in the getfjnr.action file of the Harbin Xinzhongxin Electronic Co. campus one-card system, which allows an attacker to exploit the vulnerability to...

CVE-2017-5154

An issue was discovered in Advantech WebAccess Version 8.1. To be able to exploit the SQL injection vulnerability, an attacker must supply malformed input to the WebAccess software. Successful attack could result in administrative access to the application and its data files...

Cicada-known CMS v5. 6 system/module/cart/control.php add function SQL injection vulnerability

Zen known in passing parameters when not directly global protection, but the first call of a dao class, that is, Zen is known the database connection class, and then call one of the quoteto escape. / On the field plus escape. Quote a var. @param mixed $value @access public @return mixed / public...

WordPress WP_Query SQL Injection Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases. WordPress wp-includes/class-wp-query.php suffers from a SQL injection vulnerability that allows remote attackers to exploit the...

GeniXCMS Posts.class.php Page id Parameter SQL Injection Vulnerability

MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. An SQL injection vulnerability exists in the id parameter of the GeniXCMS Posts.class.php page. A remote...

SQL Injection Vulnerability in Zaoyang City Shanshui Digital Website Building System

Zaoyang Shanshui digital website builder system is a website builder system. A SQL injection vulnerability exists in the Zaoyang City Landscape Digital Website Builder System. Due to the program's lack of filtering of bb parameters, an attacker can exploit the vulnerability to obtain sensitive...