CVE-2017-14761

In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter...

CVE-2017-14762

In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter...

CVE-2017-14762: Improper Neutralization of Input During Web Page Generation

In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter...

PT-2017-13722

Name of the Vulnerable Software and Affected Versions WPCHURCH Church Management System for WordPress affected versions not specified Description The issue allows SQL Injection via the id parameter. Recommendations At the moment, there is no information about a newer version that contains a fix f...

PT-2017-13724

Name of the Vulnerable Software and Affected Versions Mojoomla WPAMS Apartment Management System for WordPress affected versions not specified Description The issue allows SQL Injection via the id parameter. Recommendations At the moment, there is no information about a newer version that contain...

PT-2017-13719

Name of the Vulnerable Software and Affected Versions Mojoomla SMSmaster Multipurpose SMS Gateway for WordPress affected versions not specified Description The issue allows SQL Injection via the id parameter. Recommendations At the moment, there is no information about a newer version that contai...

PT-2017-13723

Name of the Vulnerable Software and Affected Versions Mojoomla Hospital Management System for WordPress affected versions not specified Description The issue allows SQL Injection via the id parameter. Recommendations At the moment, there is no information about a newer version that contains a fix...

CVE-2017-14761: Improper Neutralization of Input During Web Page Generation

In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter...

PT-2017-13675

Name of the Vulnerable Software and Affected Versions GeniXCMS version 1.1.4 Description The issue is related to a Cross-Site Scripting XSS vulnerability. It affects the /inc/lib/backend/menus.control.php endpoint, specifically through the id parameter. This allows for potential XSS attacks...

PT-2017-13721

Name of the Vulnerable Software and Affected Versions Mojoomla WPGYM WordPress Gym Management System affected versions not specified Description The issue allows SQL Injection via the id parameter. Recommendations At the moment, there is no information about a newer version that contains a fix fo...

PT-2017-13720

Name of the Vulnerable Software and Affected Versions Mojoomla School Management System for WordPress affected versions not specified Description The issue allows SQL Injection via the id parameter. Recommendations At the moment, there is no information about a newer version that contains a fix f...

CVE-2015-7670: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in includes/update.php in the Support Ticket System plugin before 1.2.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 user or 2 id parameter...

PT-2017-13268

Name of the Vulnerable Software and Affected Versions Responsive Image Gallery plugin versions prior to 1.2.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in an add edit theme task in the "wpdevart gallery themes"...

CVE-2017-1002023: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin Easy Team Manager v1.3.2, The code does not sanitize id before making it part of an SQL statement in file ./easy-team-manager/inc/easyteammanagerdescedit.php...

CVE-2017-14345

SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php...

CVE-2017-14345

CVE-2017-14345 affects the tianchoy/blog project, where a SQL injection is possible through the id parameter to view.php. The vulnerability is described across multiple sources (Red Hat, CNVD, NVD, CVE listings) as existing up to 2017-09-12, with the attack surface being the id parameter passed t...

CVE-2017-14345

SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php...

CVE-2017-14345: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php...

Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2017-32848)

Dolibarr ERP/CRM is an open source software/freeware for small and medium-sized businesses, organizations or freelancers. It includes different features such as Enterprise Resource Planning ERP and Customer Relationship Management CRM, as well as applications for other different activities. A SQL...

PT-2017-13406

Name of the Vulnerable Software and Affected Versions tianchoy/blog versions prior to 2017-09-12 Description The issue exists due to SQL Injection in the id parameter to the "view.php" endpoint. Recommendations For versions prior to 2017-09-12, avoid using the id parameter in the "view.php"...