CVE-2014-100012

SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i parameter...

PT-2024-41468

Уязвимость функции main модуль mint.cpp системы управления базами данных «Ред База Данных» связана с неправильной обработкой параметра I утилиты mint. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, передать утилите слишком длинную строку и вызвать падение утилиты mint...

SQL injection vulnerability in the i*** parameter of the us***.php page of the website building system of Xi'an BaiLian Network Technology Co.

Xi'an BaiLian Network Technology Co., Ltd. is the first technology company specializing in bearing industry management software development and bearing industry portal design. Xi'an Bailian Network Technology Co., Ltd. website building system us.php page i parameters exist SQL injection...

SQL injection vulnerability in the i*** parameter of the pr***.php page of the Suzhou Topps website builder system

Suzhou Topps Network Technology Co., Ltd. is a network company that provides website construction and promotion services. Suzhou Topps Web site building system pr.php page i parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

CVE-2018-13123

onefilecms.php in OneFileCMS through 2017-10-08 might allow attackers to read arbitrary files via the i and f parameters, as demonstrated by ?i=etc/&f=passwd&p=rawview for the /etc/passwd file...

CVE-2018-13123: Exposure of Sensitive Information to an Unauthorized Actor

onefilecms.php in OneFileCMS through 2017-10-08 might allow attackers to read arbitrary files via the i and f parameters, as demonstrated by ?i=etc/&f=passwd&p=rawview for the /etc/passwd file...

PT-2018-11615

Name of the Vulnerable Software and Affected Versions OneFileCMS versions prior to 2017-10-08 Description The issue allows attackers to read arbitrary files via the i and f parameters. For example, the "/etc/passwd" file can be accessed using the endpoint "?i=etc/&f=passwd&p=raw view"...

CVE-2014-100012: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i parameter...

PT-2015-3618

Name of the Vulnerable Software and Affected Versions Sendy version 1.1.8.4 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the i parameter in the "/app" API endpoint. Recommendations For Sendy version 1.1.8.4, update to a version...

PT-2014-4764

Name of the Vulnerable Software and Affected Versions InterWorx Web Control Panel versions prior to 5.0.14 build 577 Description The issue allows remote authenticated users to execute arbitrary SQL commands via the i parameter in a search action to the NodeWorx, SiteWorx, or Resellers interface...

CVE-2014-2531: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in xhr.php in InterWorx Web Control Panel aka InterWorx Hosting Control Panel and InterWorx-CP before 5.0.14 build 577 allows remote authenticated users to execute arbitrary SQL commands via the i parameter in a search action to the 1 NodeWorx , 2 SiteWorx, or 3...

CVE-2011-4624

Cross-site scripting XSS vulnerability in facebook.php in the GRAND FlAGallery plugin flash-album-gallery before 1.57 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter...

CVE-2011-4624: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in facebook.php in the GRAND FlAGallery plugin flash-album-gallery before 1.57 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter...

PT-2014-2175

Name of the Vulnerable Software and Affected Versions GRAND FlAGallery plugin flash-album-gallery versions prior to 1.57 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML. The vulnerability is exploite...

PT-2014-6164

Name of the Vulnerable Software and Affected Versions FoeCMS affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the i parameter in the "index.php" file. Recommendations At the moment, there is no information about ...

CVE-2014-4850: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in FoeCMS allows remote attackers to execute arbitrary SQL commands via the i parameter...

CVE-2014-2035

Cross-site scripting XSS vulnerability in xhr.php in InterWorx Web Control Panel aka InterWorx Hosting Control Panel and InterWorx-CP before 5.0.13 build 574 allows remote attackers to inject arbitrary web script or HTML via the i parameter...

Sendy 'i' SQL注入漏洞

Bugtraq ID:65772 Sendy是一款自托管的电子邮件通讯应用。 应用对用户通过'i'提交的参数缺少充分过滤，允许攻击者利用漏洞进行SQL注入攻击，可获得敏感数据库信息或控制应用系统。 0 Sendy 1.1.8.4 目前没有详细解决方案提供： http://sendy.co http://www.example.com/app?i=1+union+all+select+1,2,3,4,5,6,@@version,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--...

PT-2014-4441

Name of the Vulnerable Software and Affected Versions InterWorx Web Control Panel versions prior to 5.0.13 build 574 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the i parameter in the xhr.php file. This could potentially lead to...

CVE-2014-2035: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in xhr.php in InterWorx Web Control Panel aka InterWorx Hosting Control Panel and InterWorx-CP before 5.0.13 build 574 allows remote attackers to inject arbitrary web script or HTML via the i parameter...