9770 matches found
UBUNTU-CVE-2017-14238
SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter...
NexusPHP linksmanage.php file SQL injection vulnerability
NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in NexusPHP version 1.5.beta5.20120707. A remote attacker can exploit this vulnerability by sending the 'id' parameter to the linksmanage.php file to inject...
CVE-2017-14076
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action...
CVE-2017-14076: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action...
PT-2017-13233
Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5.beta5.20120707 Description A SQL Injection issue exists via the id parameter to "linksmanage.php" in an "editlink" action. Recommendations For NexusPHP version 1.5.beta5.20120707, avoid using the id parameter in the...
SQL injection vulnerability in the show.html/show.php page of the website building system of Sichuan Horizontal World Technology Co.
Ltd. is an Internet + solution provider and execution service provider. A SQL injection vulnerability exists in the show.html/show.php page of Sichuan Horizontal World Technology Co. The vulnerability is due to the system id parameter does not filter the data submitted by the user, remote attacke...
SQL injection vulnerability in id parameter of website building system of Suzhou Golden Shield Network Technology Co.
Ltd. is mainly engaged in website construction, website promotion, website optimization, enterprise post office, color page samples and other services for Suzhou enterprises. Suzhou Golden Shield Network Technology Co., Ltd. building system id parameters exist SQL injection vulnerability, attacke...
SQL injection vulnerability in the nav_id parameter of the arc.php page of the Yuntrun website builder system
Yuntrue United website builder system is a website builder system SQL injection vulnerability exists in the navid parameter on the arc.php page of the Yuntrun website builder system, which can be exploited by attackers to obtain sensitive information from the database...
Yunnan Dandelion Network Technology Co., Ltd. website building system has SQL injection vulnerabilities
Yunnan Dandelion Network Technology Co., Ltd. is a station building system. A SQL injection vulnerability exists in Yunnan Dandelion Network Technology Co. The vulnerability is due to the system id parameter does not filter the data submitted by the user, a remote attacker can exploit the...
SQL injection vulnerability in case_view.php and product.php pages of Nanjing DotMo Design website builder system.
Nanjing dot ink design website builder system is a website builder system. A SQL injection vulnerability exists in the caseview.php and product.php pages of the Nanjing DotMo Design website builder system. The vulnerability is due to the system id parameter does not filter the data submitted by t...
Apache2Triad Session Fixation Vulnerability
Apache2Triad is a server software deployment solution for Windows-based platforms. A session fixation vulnerability exists in Apache2Triad version 1.5.4. A remote attacker can exploit this vulnerability to hijack a web session with the help of the 'PHPSESSID' parameter...
CVE-2017-12965
Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID parameter...
CVE-2017-13137
The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php...
PT-2017-12925
Name of the Vulnerable Software and Affected Versions FormCraft Basic plugin version 1.0.5 Description The issue concerns SQL injection in the id parameter to the "form.php" endpoint. Recommendations For FormCraft Basic plugin version 1.0.5, avoid using the id parameter in the form.php endpoint...
CVE-2017-13137: Improper Neutralization of Special Elements used in an SQL Command
The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php...
SQL Injection Vulnerability in Paysan Network Backend Management System
Paixiang network backstage management system is a station-building system developed by Zhejiang Soupai Information Technology Co. There is a SQL injection vulnerability in the id parameter of PaiSang's backend management system, which can be exploited by an attacker to obtain sensitive informatio...
CVE-2017-12946
classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in a delete action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by administrators...
Multiple Vulnerabilities in Duxcms Backend
DuxCms is a PHP development, based on HMVC rules for small and medium-sized enterprises, companies, news, personal and other related industries, website content management. Duxcms backend - form - guestbook cross-site scripting and SQL injection vulnerability. The vulnerability due to the system ...
PHP-Bridge Component SQL Injection Vulnerability in Joomla!
Joomla! is an open source, cross-platform content management system developed using PHP and MySQL. A SQL injection vulnerability exists in the id parameter in Joomla! PHP-Bridge, which can be exploited by attackers to access or modify database data...