47 matches found
CVE-2020-11537
A SQL Injection issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can execute arbitrary SQL queries via injection to DocID parameter of Websocket API...
CVE-2020-11537: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can execute arbitrary SQL queries via injection to DocID parameter of Websocket API...
CVE-2018-17180: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in OpenEMR before 5.0.1 Patch 7. Directory Traversal exists via docid=../ to /portal/lib/downloadtemplate.php...
OpenEMR Directory Traversal Vulnerability (CNVD-2019-10150)
OpenEMR is a medical practice management software that also supports electronic medical records EMR. A directory traversal vulnerability exists in portal/importtemplate.php in OpenEMR versions prior to 5.0.1.4, which can be exploited by a remote attacker to read arbitrary files via the "docid"...
OpenEMR Directory Traversal Vulnerability
OpenEMR is a medical practice management software that also supports electronic medical records EMR. A directory traversal vulnerability exists in portal/importtemplate.php in OpenEMR versions prior to 5.0.1.4, which can be exploited by remote attackers to execute arbitrary PHP code via the "doci...
OpenEMR Directory Traversal Vulnerability (CNVD-2019-10153)
OpenEMR is a medical practice management software that also supports electronic medical records EMR. A directory traversal vulnerability exists in portal/importtemplate.php in versions of OpenEMR prior to 5.0.1.4, which can be exploited by a remote attacker to delete arbitrary files with the help...
CVE-2018-15141
Directory traversal in portal/importtemplate.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to delete arbitrary files via the "docid" parameter when the mode is set to delete...
Directory traversal
Directory traversal in portal/importtemplate.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to read arbitrary files via the "docid" parameter when the mode is set to get...
CVE-2018-15141
Directory traversal in portal/importtemplate.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to delete arbitrary files via the "docid" parameter when the mode is set to delete...
CVE-2018-15140: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal in portal/importtemplate.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to read arbitrary files via the "docid" parameter when the mode is set to get...
麦达特色库检索平台SQL注入
简要描述： RT 详细说明： 杭州麦达电子有限公司开发的特色库系统，用户包括众多国内知名高校。 http://www.metadata.com.cn/cpjs1.asp?ProID=42 该系统存在注入，以 http://210.33.44.5:8080/docinfo?docid=302&dbid=2&dbname=%E5%AD%A6%E4%BD%8D%E8%AE%BA%E6%96%87%E5%BA%93 为例 docid 参数存在注入 漏洞证明： 部分测试案例：...
阿帕比数字资源平台系统mssql注入
简要描述： 一处mssql的注入 详细说明： 厂商： http://gw.apabi.com/ 北京方正阿帕比技术有限公司 用户量比较多： SQL注入点： /AddMyFavourite.asp?lang=gb&DocID= 其中DocID存在sql注入 互联网自动采集案例5枚： http://ebook.nwu.edu.cn/AddMyFavourite.asp?lang=gb&DocID=1 http://dlib.gsjtxy.edu.cn/dlib/AddMyFavourite.asp?lang=gb&DocID=1...
博云非书论文管理系统存在通用型SQL注入
简要描述： 论文管理系统存在通用型SQL注入 详细说明： 注入点：dbid和docid 搜索关键字：inurl:/docinfo.action?dbid= http://202.195.136.150/docinfo.action?dbid=72&docid=40824 http://202.199.163.37/docinfo.action?dbid=72&docid=40619 http://paper.buaalib.com/docinfo.action?dbid=72&docid=5793...
CVE-2013-3602: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in admindocumentworker.jsp in Coursemill Learning Management System LMS 6.6 allows remote authenticated users to execute arbitrary SQL commands via the docID parameter...
HP-UX Update for Xserver HPSBUX02225
Check for the Version of Xserver OpenVAS Vulnerability Test HP-UX Update for Xserver HPSBUX02225 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Sql injection
SQL injection vulnerability in dpage.php in YPN PHP Realty allows remote attackers to execute arbitrary SQL commands via the docID parameter...
CVE-2008-3682
SQL injection vulnerability in dpage.php in YPN PHP Realty allows remote attackers to execute arbitrary SQL commands via the docID parameter...
CVE-2008-3682
CVE-2008-3682 describes an SQL injection vulnerability in dpage.php of YPN PHP Realty. The underlying issue is unsafely handling the docID parameter, enabling remote attackers to execute arbitrary SQL commands. Documents consistently state: an injection via docID could impact the application, wit...
CVE-2008-3682: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in dpage.php in YPN PHP Realty allows remote attackers to execute arbitrary SQL commands via the docID parameter...