CVE-2019-8935

Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter...

CVE-2019-7332

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'eid' aka Event ID parameter value in the view download download.php because proper filtration is omitted...

CVE-2019-7316

An issue was discovered in CSS-TRICKS Chat2 through 2015-05-05. The userid parameter in jumpin.php has a SQL injection vulnerability...

CVE-2019-6805

SQL Injection was found in S-CMS version V3.0 via the alipay/alipayapi.php Oid parameter...

CVE-2019-6707

PHPSHE 1.7 has SQL injection via the admin.php?mod=product&act=state productid parameter...

Sql injection

Cleanto 5.0 has SQL Injection via the assets/lib/exportajax.php id parameter...

CVE-2019-6295

Cleanto 5.0 has SQL Injection via the assets/lib/servicemethodajax.php serviceid parameter...

CVE-2019-6296

Cleanto 5.0 has SQL Injection via the assets/lib/exportajax.php id parameter...

CVE-2019-6296

Cleanto 5.0 has SQL Injection via the assets/lib/exportajax.php id parameter...

CVE-2019-6296

Cleanto 5.0 has SQL Injection via the assets/lib/exportajax.php id parameter...

idreamsoft iCMS SQL Injection Vulnerability (CNVD-2019-12126)

iCMS is an efficient and simple content management system built with PHP and MySQL. A SQL injection vulnerability exists in idreamsoft iCMS 7.0.13, which can be exploited by remote attackers to execute SQL commands with the help of the 'dataid' parameter...

CVE-2019-6259

An issue was discovered in idreamsoft iCMS V7.0.13. There is SQL Injection via the app/article/article.admincp.php dataid parameter...

Event Locations 1.0.1 - 'id' SQL Injection

Exploit Title: Event Locations 1.0.1 - SQL Injection Dork: N/A Date: 2019-01-10 Exploit Author: Ihsan Sencan Vendor Homepage: http://ezcode.pt/ Software Link: https://codecanyon.net/item/event-locations-phpmysql-plugin/22100679 Version: 1.0.1 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...

Plikli CMS SQL Injection Vulnerability

Plikli CMS is a content management system CMS. A SQL injection vulnerability exists in Plikli CMS version 4.0.0, which can be exploited by a remote attacker to execute arbitrary SQL commands by sending the 'id' parameter to the joingroup.php file or the 'commentid ' parameter to the joingroup.php...

Sql injection

Multiple SQL injection vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to joingroup.php or 2 commentid parameter to story.php...

CVE-2018-19415

Multiple SQL injection vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to joingroup.php or 2 commentid parameter to story.php...

CVE-2018-13045

SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to execute arbitrary SQL commands via the "id" parameter...

CVE-2019-3577

An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id0 parameter to the /product URI...

CVE-2018-20480

An issue was discovered in S-CMS 1.0. It allows SQL Injection via the js/pic.php Pid parameter...

S-CMS SQL Injection Vulnerability (CNVD-2018-26679)

S-CMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in S-CMS version 1.0, which can be exploited by remote attackers to execute SQL commands by sending the 'Sid' parameter to the wapindex.php?type=newsinfo URL...