62 matches found
CVE-2013-4168
Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...
SQL Injection Vulnerability in KenCMS V1.1 Enterprise Member Experience System end_time Parameter
KenCMS is a content management system. A SQL injection vulnerability exists in the KenCMS V1.1 Enterprise Member Experience system. The lack of filtering of the 'endtime' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...