CVE-2017-17567: Improper Neutralization of Special Elements used in an SQL Command

Scubez Posty Readymade Classifieds has SQL Injection via the admin/useractivatesubmit.php ID parameter...

PT-2017-14870

Name of the Vulnerable Software and Affected Versions FS Groupon Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the id parameter in the "item details.php" or "vendor details.php" API endpoints. Recommendations For FS Groupon Clone version 1.0, avoid usi...

PT-2017-14901

Name of the Vulnerable Software and Affected Versions Consumer Complaints Clone Script version 1.0 Description The issue is related to SQL Injection, which occurs via the id parameter in the "other-user-profile.php" file. Recommendations For Consumer Complaints Clone Script version 1.0, avoid usi...

CVE-2017-17575: Improper Neutralization of Special Elements used in an SQL Command

FS Groupon Clone 1.0 has SQL Injection via the itemdetails.php id parameter or the vendordetails.php id parameter...

CVE-2017-17578: Improper Neutralization of Special Elements used in an SQL Command

FS Crowdfunding Script 1.0 has SQL Injection via the latestnewsdetails.php id parameter...

PT-2017-14716

Name of the Vulnerable Software and Affected Versions Techno Portfolio Management Panel version 1.0 Description The issue allows an attacker to inject SQL commands via a "single.php?id=" request. This could potentially lead to unauthorized access or manipulation of data. Recommendations For Techn...

CVE-2017-17055

Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting XSS attack involving the username-form-id parameter to freeradius.users.php...

pantamusik.com XSS vulnerability

Open Bug Bounty ID: OBB-442008 Description| Value ---|--- Affected Website:| pantamusik.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

CVE-2015-3934

Multiple SQL injection vulnerabilities in Fiyo CMS 2.01.9.1 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to apps/apparticle/controller/rating.php or 2 user parameter to user/login...

CVE-2017-15981

Responsive Newspaper Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

Sql injection

AROX School ERP PHP Script 1.0 allows SQL Injection via the officeadmin/ id parameter...

CVE-2017-15978

AROX School ERP PHP Script 1.0 allows SQL Injection via the officeadmin/ id parameter...

CVE-2017-15983

MyMagazine Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

CVE-2017-15987

Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter...

CVE-2017-15982

Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

PT-2017-14332

Name of the Vulnerable Software and Affected Versions AROX School ERP PHP Script version 1.0 Description The issue allows SQL Injection via the id parameter in the office admin endpoint. Recommendations For AROX School ERP PHP Script version 1.0, consider restricting access to the office admin...

PT-2017-14342

Name of the Vulnerable Software and Affected Versions Fake Magazine Cover Script affected versions not specified Description The issue allows SQL Injection via the rate.php value parameter or the content.php id parameter. Recommendations For all affected versions, consider restricting access to t...

PT-2017-14337

Name of the Vulnerable Software and Affected Versions Dynamic News Magazine & Blog CMS version 1.0 Description The issue allows SQL Injection via the id parameter to the "admin/admin process.php" endpoint for form editing. Recommendations For Dynamic News Magazine & Blog CMS version 1.0, avoid...

CVE-2017-15983: Improper Neutralization of Special Elements used in an SQL Command

MyMagazine Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

CVE-2017-15982: Improper Neutralization of Special Elements used in an SQL Command

Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...