EUVD-2017-9328

Malware in sbrugna...

HamayeshNegar CMS 'downloadpaper.php' SQL Injection Vulnerability

HamayeshNegar CMS is a content management system. A SQL injection vulnerability exists in the HamayeshNegar CMS 'downloadpaper.php' page, which can be exploited by attackers to access or modify database data...

HamayeshNegar CMS signup component SQL injection vulnerability

HamayeshNegar CMS is a content management system. signup component is one of the signup functionality components. A SQL injection vulnerability exists in the users/signup.php file of the signup component in HamayeshNegar CMS. The vulnerability can be exploited by a remote attacker to execute...

CVE-2017-18194

SQL injection vulnerability in users/signup.php in the "signup" component in HamayeshNegar CMS allows a remote attacker to execute arbitrary SQL commands via the "utype" parameter...

Sql injection

SQL injection vulnerability in users/signup.php in the "signup" component in HamayeshNegar CMS allows a remote attacker to execute arbitrary SQL commands via the "utype" parameter...

CVE-2017-18194

SQL injection vulnerability in users/signup.php in the "signup" component in HamayeshNegar CMS allows a remote attacker to execute arbitrary SQL commands via the "utype" parameter...

CVE-2017-18194

HamayeshNegar CMS is affected in its signup component (users/signup.php). The vulnerability is a SQL injection caused by the utype parameter, allowing a remote attacker to execute arbitrary SQL commands. The exploitation details are not provided in the documents; no patch or remediation steps are...

PT-2018-6725

Name of the Vulnerable Software and Affected Versions: HamayeshNegar CMS affected versions not specified Description: A SQL injection issue exists in the "signup" component of HamayeshNegar CMS, specifically in the users/signup.php file. This allows a remote attacker to execute arbitrary SQL...

CVE-2017-18194: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in users/signup.php in the "signup" component in HamayeshNegar CMS allows a remote attacker to execute arbitrary SQL commands via the "utype" parameter...