82 matches found
CVE-2024-4595 SEMCMS function.php locate sql injection
A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is the function locate of the file function.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...
CVE-2024-4595: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is the function locate of the file function.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...
CVE-2023-45951
lylmespage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php...
Sql injection
lylmespage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php...
PT-2023-29770 · Unknown · Lylme Spage
Name of the Vulnerable Software and Affected Versions: lylme spage version 1.7.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the $userip parameter at function.php. Recommendations: For lylme spage version 1.7.0, consider restricting...
LyLme Spage SQL Injection Vulnerability
LyLme Spage six zero navigation page is China's six zero LyLme open source a navigation page . Committed to simple and efficient advertising-free Internet navigation and search portal , support for background links , custom search engine , precipitation of the most valuable links , no commercial...
CVE-2023-45951
lylmespage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php...
CVE-2023-45951
lylmespage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php...
CVE-2023-45951: Improper Neutralization of Special Elements used in an SQL Command
lylmespage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php...
Sql injection
A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been rated as critical. Affected by this issue is the function deleterecord of the file function.php. The manipulation of the argument id leads to sql injection. VDB-220346 is the identifier assigned to this...
CVE-2023-0707 SourceCodester Medical Certificate Generator App function.php delete_record sql injection
A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been rated as critical. Affected by this issue is the function deleterecord of the file function.php. The manipulation of the argument id leads to sql injection. VDB-220346 is the identifier assigned to this...
CVE-2023-0707: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been rated as critical. Affected by this issue is the function deleterecord of the file function.php. The manipulation of the argument id leads to sql injection. VDB-220346 is the identifier assigned to this...
PT-2023-16464 · Sourcecodester · Sourcecodester Medical Certificate Generator App
Name of the Vulnerable Software and Affected Versions: SourceCodester Medical Certificate Generator App version 1.0 Description: A critical issue has been found in the function delete record of the file function.php. The manipulation of the argument id leads to SQL injection. Recommendations: For...
CVE-2022-32417
PbootCMS v3.1.2 was discovered to contain a remote code execution RCE vulnerability via the function parserIfLabel at function.php...
CVE-2022-32417
PbootCMS v3.1.2 was discovered to contain a remote code execution RCE vulnerability via the function parserIfLabel at function.php...
CVE-2022-32417
PbootCMS v3.1.2 contains a remote code execution (RCE) vulnerability in parserIfLabel() within function.php, as identified for CVE-2022-32417. The affected software is PbootCMS (core version 3.1.2). Reported impact includes remote code execution with potential full host compromise; CVSS v3.1 vect...
CVE-2022-32417
PbootCMS v3.1.2 was discovered to contain a remote code execution RCE vulnerability via the function parserIfLabel at function.php...
CVE-2022-24608
Luocms v2.0 is affected by Cross Site Scripting XSS in /admin/news/sortadd.php and /inc/function.php...
CVE-2022-24608
CVE-2022-24608 affects Luocms v2.0 with Cross Site Scripting (XSS) in /admin/news/sort_add.php and /inc/function.php. The root cause is lack of input validation/filtering and unsafe output of user-supplied data, enabling an attacker to inject JavaScript code that could be executed in the client b...