9770 matches found
CVE-2017-15973: Improper Neutralization of Special Elements used in an SQL Command
Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/membersview.php...
PT-2017-14319
Name of the Vulnerable Software and Affected Versions com ns downloadshop version 2.2.6 Description The issue allows SQL Injection via the id parameter in an "invoice.create" action. Recommendations For version 2.2.6, update to a newer version that contains a fix for this issue...
PT-2017-14315
Name of the Vulnerable Software and Affected Versions iProject Management System version 1.0 Description The issue allows SQL Injection via the ID parameter to "index.php". Recommendations For iProject Management System version 1.0, avoid using the ID parameter in the "index.php" endpoint until t...
CVE-2017-15949
Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the logid parameter to admin/editgroup.php...
CVE-2017-15907
SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php...
CVE-2017-15907
SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php...
FS Monster Clone SQL Injection
Exploit Title: FS Monster Clone - 'id' SQL Injection Date: 2017-10-24 Exploit Author: 8bitsec Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/monster-clone/ Version: 24 October 17 Tested on: Kali Linux 2.0 | Mac OS 10.12.6 Email: [email protected]...
PT-2017-14276
Name of the Vulnerable Software and Affected Versions phpCollab versions 2.5.1 and earlier Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter to the "newsdesk/newsdesk.php" endpoint. Recommendations For phpCollab...
CVE-2017-15907: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php...
FS Monster Clone - id SQL Injection
FS Monster Clone - id SQL Injection Exploit Title: FS Monster Clone - 'id' SQL Injection Date: 2017-10-24 Exploit Author: 8bitsec Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/monster-clone/ Version: 24 October 17 Tested on: Kali Linux 2.0 | Mac OS...
Multiple Cross-Site Scripting Vulnerabilities in WordPress WpJobBoard
WordPress WpJobBoard is a job panel plugin for WordPress. wpjb-email, wpjb-job, wpjb-application, and wpjb-membership are components of it. wpjb-email is an email component. wpjb- job is a job management component. Multiple cross-site scripting vulnerabilities exist in the 'query' and 'id'...
CVE-2017-15539
SQL Injection exists in zorovavi/blog through 2017-10-17 via the id parameter to recept.php...
CVE-2017-15539: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in zorovavi/blog through 2017-10-17 via the id parameter to recept.php...
WordPress Support Ticket System SQL Injection Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Support Ticket System plugin is one of the ticket system plugin. A SQL injection vulnerability exists in WordPress...
CVE-2017-14848
WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employeeid parameter...
Easy Blog PHP Script 1.3a - id Parameter SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Easy Blog PHP Script v1.3a - SQL Injection Date: 2017-09-27 Exploit Author: 8bitsec Vendor Homepage: https://www.codester.com/ Software Link: https://www.codester.com/items/4616/easy-blog-php-script Version: 1.3a Tested on: Kali...
CVE-2017-14842
Mojoomla SMSmaster Multipurpose SMS Gateway for WordPress allows SQL Injection via the id parameter...
CVE-2017-14847
Mojoomla WPAMS Apartment Management System for WordPress allows SQL Injection via the id parameter...
