1066 matches found
SQL Injection Vulnerability in Engineering Quality Supervision Station Comprehensive Information Service Platform of Zhuhai Xinhua Tong Software Co.
Engineering Quality Supervision Station comprehensive information service platform is mainly construction project quality and safety supervision and other related series of software products. The product exists SQL injection vulnerability, the vulnerability URL is:...
SQL Injection Vulnerability in TechConnect CMS
Shandong Techtronics Internet CMS is a PHP-developed enterprise building system. Kechuang Internet CMS id parameter exists SQL injection vulnerability, the vulnerability URL is: /cctrl/admin/news/contShow.php?id=2, the attacker can use the vulnerability to obtain database data...
Knight CMS Talent System SQL Injection Vulnerability
Knight CMS Talent System is a professional talent system based on PHP+MYSQL. Knight CMS Talent System v3.7 exists SQL injection vulnerability, due to the variable $id filtering was omitted to cause injection, attackers use the vulnerability to obtain sensitive information...
Misys FusionCapital Opics Plus SQL Injection Vulnerability
Misys FusionCapital Opics Plus is an end-to-end scalable money business solution for the financial industry from Misys UK. The solution provides IAS-compliant accounting structures, foreign exchange tools and client-facing e-banking capabilities. An SQL injection vulnerability exists in Misys...
Calls to Action WordPress Plugin Reflective Cross-Site Scripting Vulnerability
Calls to Action is a plugin for calling events on WordPress sites. Calls to Action 2.4.3 and earlier versions do not effectively filter the "open-tab" HTTP GET parameter value and the "wp-cta-variation-id" HTTP GET parameter value, which allows an unauthenticated, remote attacker to trick...
ApPHP Hotel Site SQL Injection Vulnerability
ApPHP Hotel Site is a PHP-based hotel management solution from ApPHP USA. The program provides hotel management and online booking and other functions. A SQL injection vulnerability exists in ApPHP Hotel Site version 3.x.x. The vulnerability stems from the index.php script failing to adequately...
SQL Injection Vulnerability in id Parameter of E-procurement System of Yizitong
Yicai Tong has been committed to enterprise procurement informationization and procurement consulting, providing in-depth solutions in the direction of procurement management, group intensive procurement management, lean supply chain, strategic procurement, project supply chain, and industrialize...
CVE-2015-2082
Cross-site scripting XSS vulnerability in Login.aspx in UNIT4 Prosoft HRMS before 8.14.330.43 allows remote attackers to inject arbitrary web script or HTML via the txtUserID parameter...
CMSJunkie J-ClassifiedsManager Component SQL Injection Vulnerability in Joomla!
Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds , site search and other features.CMSJunkie J-ClassifiedsManager is one of the classified ads site components. A SQL injection vulnerability exists in the Joomla...
stapler-adjunct-zeroclipboard: XSS via copying XSS payload into buffer
Cross-site scripting XSS vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in ZeroClipboard before 1.0.8, as used in em-shorty, RepRapCalculator, Fulcrum, Django, aCMS, and other products, allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this is...
CVE-2012-3570
Buffer overflow in ISC DHCP 4.2.x before 4.2.4-P1, when DHCPv6 mode is enabled, allows remote attackers to cause a denial of service segmentation fault and daemon exit via a crafted client identifier parameter...
CVE-2012-3570
Buffer overflow in ISC DHCP 4.2.x before 4.2.4-P1, when DHCPv6 mode is enabled, allows remote attackers to cause a denial of service segmentation fault and daemon exit via a crafted client identifier parameter...
CVE-2010-5041
SQL injection vulnerability in index.php in the NPGallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary SQL commands via the id parameter in a plugin action...
CVE-2010-4997
SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action...
CVE-2010-4955
SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3078...
PT-2010-3305 · Cacti · Cacti
Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 0.8.7f Description: The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters to certain PHP files. The vulnerable parameters include hostname and description in host.php, as well...
CVE-2010-2013
Cross-site scripting XSS vulnerability in cp/editemail.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2010-2014
Cross-site scripting XSS vulnerability in cp/listcontent.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the cl or possibly id parameter...