6845 matches found
S-CMS Cross-Site Scripting Vulnerability (CNVD-2018-26677)
S-CMS is a content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in the admin/demo.php file in S-CMS version 3.0, which stems from the program's failure to filter the 'Tid' parameter, which can be exploited by remote attackers to inject arbitrary Web...
PT-2018-15401 · S Cms · S-Cms
Name of the Vulnerable Software and Affected Versions: S-CMS version 3.0 Description: An issue in S-CMS allows cross-site scripting XSS attacks via the T id parameter in the "admin/demo.php" API endpoint. Recommendations: For S-CMS version 3.0, avoid using the T id parameter in the "admin/demo.ph...
Sql injection
SQL injection vulnerability in the "ContentPlaceHolder1uxTitle" component in ArchiveNews.aspx in jco.ir KARMA 6.0.0 allows a remote attacker to execute arbitrary SQL commands via the "id" parameter...
CVE-2018-18399
SQL injection vulnerability in the "ContentPlaceHolder1uxTitle" component in ArchiveNews.aspx in jco.ir KARMA 6.0.0 allows a remote attacker to execute arbitrary SQL commands via the "id" parameter...
S-CMS SQL Injection Vulnerability (CNVD-2019-08326)
S-CMS is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station of the product. S-CMS 3.0 has a SQL injection vulnerability, which can be exploited by attackers through the Sid parameter to conduct SQL injection attacks...
CVE-2018-20018
S-CMS V3.0 has SQL injection via the Sid parameter, as demonstrated by the /1/?type=productinfo&Sid=140 URI...
HasanMWB 1.0 - SQL Injection
Exploit Title: HasanMWB 1.0 - SQL Injection Dork: N/A Date: 2018-12-05 Exploit Author: Ihsan Sencan Vendor Homepage: https://sourceforge.net/projects/hasanmwb/ Software Link: https://netcologne.dl.sourceforge.net/project/hasanmwb/HasanMWB-v1.zip Version: 1.0 Category: Webapps Tested on:...
CuppaCMS SQL Injection Vulnerability
CuppaCMS is a content management system CMS. A SQL injection vulnerability exists in the administrator/classes/ajax/functions.php file in CuppaCMS 2018-11-12 and earlier versions. A remote attacker can exploit the vulnerability to execute SQL commands with the help of 'referenceid' parameter...
CVE-2018-18795
School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter...
CVE-2018-18795
School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter...
CVE-2018-18795
School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter...
PAYFORT payfort-php-SDK cross-site scripting vulnerability (CNVD-2019-08572)
PayFort is an online payment gateway. payfort-php-SDK is the PayFort payment gateway SDK. A cross-site scripting vulnerability exists in Amazon PAYFORT payfort-php-SDK on 2018-04-26 and earlier versions, which can be exploited by an attacker via the success.php fortid parameter to conduct a...
CCTV News App Has Arbitrary Account Login Vulnerability
CCTV News App is a portal news app software. CCTV News APP has an arbitrary account login vulnerability. Attackers can use this vulnerability to log into other people's accounts and obtain sensitive information by grabbing packets and modifying UID parameters...
Synology Photo Station Session Fixation Vulnerability
Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. A session fixation vulnerability exists in SYNO.PhotoStation.Auth in Synology Photo Station versions prior to 6.8.7-3481, which can be exploited by remote attackers to hijack a web session with...
CVE-2018-18552
ServersCheck Monitoring Software through 14.3.3 allows local users to cause a denial of service menu functionality loss by creating an LNK file that points to a second LNK file, if this second LNK file is associated with a Start menu. Ultimately, this behavior comes from a Directory Traversal bug...
PHPSHE SQL Injection Vulnerability
PHPSHE is an online shopping mall system. The system supports express tracking, online chat, order evaluation and statistics. A SQL injection vulnerability exists in the admin.php?mod=user&act=del script in PHPSHE version 1.7. A remote attacker can exploit this vulnerability to execute arbitrary...
CVE-2018-18427
s-cms 3.0 allows SQL Injection via the member/post.php 0id parameter or the POST data to member/memberlogin.php...
SQL Injection Vulnerability in Dscms
Dscms is an enterprise website builder based on TP5.0 framework development, using PHP + Mysql architecture. Dscms 0.1 version of the front-end SQL injection vulnerability, the vulnerability stems from the failure to filter the parameter $id, attackers can use the vulnerability to obtain sensitiv...