26 matches found
CVE-2023-30203
Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the eventid parameter at /php-jms/resultsheet.php...
CVE-2021-24552
The Simple Events Calendar WordPress plugin through 1.4.0 does not sanitise, validate or escape the eventid POST parameter before using it in a SQL statement when deleting events, leading to an authenticated SQL injection issue...
CVE-2021-26935
In WoWonder 3.1, remote attackers can gain access to the database by exploiting a requests.php?f=search-my-followers SQL Injection vulnerability via the eventid parameter...
CVE-2019-7332
Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'eid' aka Event ID parameter value in the view download download.php because proper filtration is omitted...
CVE-2018-5315
The Wachipi WP Events Calendar plugin 1.0 for WordPress has SQL Injection via the eventid parameter to event.php...
CVE-2006-3052
Cross-site scripting XSS vulnerability in Event Registration allows remote attackers to inject arbitrary web script or HTML via the 1 eventid parameter to view-event-details.php or 2 selectevents parameter to event-registration.php. NOTE: the provenance of this information is unknown; the details...