CVE-2017-17610

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

CVE-2017-17610

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

Sql injection

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

Sql injection

MLM Forex Market Plan Script 2.0.4 has SQL Injection via the newsdetail.php newid parameter or the eventdetail.php eventid parameter...

CVE-2017-17635

MLM Forex Market Plan Script 2.0.4 has SQL Injection via the newsdetail.php newid parameter or the eventdetail.php eventid parameter...

CVE-2017-17635

The CVE-2017-17635 entry concerns MLM Forex Market Plan Script version 2.0.4, with a SQL Injection vulnerability exploitable via input parameters: news_detail.php newid and event_detail.php eventid. Public records (NVD, CNVD, CVE List) confirm the affected script and the injection vector, indicat...

CVE-2017-17635: Improper Neutralization of Special Elements used in an SQL Command

MLM Forex Market Plan Script 2.0.4 has SQL Injection via the newsdetail.php newid parameter or the eventdetail.php eventid parameter...

CVE-2017-17610: Improper Neutralization of Special Elements used in an SQL Command

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

PT-2017-14931

Name of the Vulnerable Software and Affected Versions MLM Forex Market Plan Script version 2.0.4 Description The issue concerns SQL Injection, which can be exploited via the newid parameter in the "news detail.php" endpoint or the eventid parameter in the "event detail.php" endpoint...

PT-2017-14906

Name of the Vulnerable Software and Affected Versions E-commerce MLM Software version 1.0 Description The issue concerns SQL Injection, which can be exploited through specific parameters in several PHP files. The vulnerable parameters are pid in 'service detail.php', eventid in 'event detail.php'...

1WebCalendar 4.0 viewEvent.cfm EventID Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/17193/info 1WebCalendar is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploi...

CVE-2013-3961

SQL injection vulnerability in editevent.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to execute arbitrary SQL commands via the eventid parameter...

Sql injection

SQL injection vulnerability in editevent.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to execute arbitrary SQL commands via the eventid parameter...

CVE-2013-3961

SQL injection vulnerability in editevent.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to execute arbitrary SQL commands via the eventid parameter...

PT-2014-2718

Name of the Vulnerable Software and Affected Versions Simple PHP Agenda versions prior to 2.2.9 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the eventid parameter in the "edit event.php" file. Recommendations For versions prior to...

CVE-2013-3961: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in editevent.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to execute arbitrary SQL commands via the eventid parameter...

CVE-2010-4910

SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the EventID parameter in a ViewEventDetails action...

Sql injection

SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the EventID parameter in a ViewEventDetails action...

CVE-2010-4910

SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the EventID parameter in a ViewEventDetails action...

PT-2011-1845

Name of the Vulnerable Software and Affected Versions ColdGen ColdCalendar version 2.06 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the EventID parameter in a "ViewEventDetails" action on the index.cfm file. Recommendations For ColdGen...