CVE-2018-6365

SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /pagenew.php...

CVE-2018-6363

SQL Injection exists in Task Rabbit Clone 1.0 via the singleblog.php id parameter...

CVE-2018-6365

The CVE-2018-6365 issue affects TSiteBuilder 1.0, where an SQL injection vulnerability arises via the id parameter in /site.php, /pagelist.php, or /page_new.php. The root cause is improper handling of the id input allowing command injection into the database query, enabling an attacker to manipul...

CVE-2018-6365

SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /pagenew.php...

CVE-2018-5988

SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobilepreview.php or index.php...

CVE-2018-5988

SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobilepreview.php or index.php...

Sql injection

SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobilepreview.php or index.php...

CVE-2018-5988

CVE-2018-5988 affects Flexible Poll 1.2. The vulnerability is a SQL Injection in the id parameter of mobile_preview.php and index.php, caused by unsafely handling user-supplied input. Impact per sources: remote attacker can inject SQL commands, with potential data exposure/integrity effects as de...

CVE-2018-5988

SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobilepreview.php or index.php...

CVE-2017-16605

This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

CVE-2017-16594

This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

CVE-2017-16605

This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

Discuz! DiscuzX cross-site scripting vulnerability (CNVD-2018-02842)

Discuz! DiscuzX is an online forum system. A cross-site scripting vulnerability exists in Discuz! DiscuzX X3.4. A remote attacker can exploit this vulnerability by sending the 'appid' parameter to the include\spacecp\spacecpspace.php file to inject arbitrary Web script or HTML...

CVE-2018-5315

The Wachipi WP Events Calendar plugin 1.0 for WordPress has SQL Injection via the eventid parameter to event.php...

Sql injection

Multiple SQL injection vulnerabilities in Muviko 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 email parameter to login.php; the 2 seasonid parameter to themes/flixer/ajax/loadseason.php; the 3 movieid parameter to themes/flixer/ajax/getrating.php; the 4 rating or 5 movie...

Muslim Matrimonial Script SQL Injection Vulnerability

Muslim Matrimonial Script is a community matrimonial script for matrimonial websites by PHP Scripts Mall. PHP Scripts Mall Muslim Matrimonial Script has a SQL injection vulnerability. The vulnerability can be exploited to conduct SQL injection attacks via the view-profile.php memid parameter...

Muslim Matrimonial Script Cross-Site Scripting Vulnerability (CNVD-2018-01241)

Muslim Matrimonial Script is a community matrimonial script for matrimonial websites by PHP Scripts Mall. A cross-site scripting vulnerability exists in PHP Scripts Mall Muslim Matrimonial Script. The vulnerability can be exploited to conduct cross-site scripting attacks via the admin/stateview.p...

Muslim Matrimonial Script Cross-Site Scripting Vulnerability

Muslim Matrimonial Script is a community matrimonial script for matrimonial websites by PHP Scripts Mall. A cross-site scripting vulnerability exists in PHP Scripts Mall Muslim Matrimonial Script. The vulnerability can be exploited to conduct cross-site scripting attacks via the...

Muslim Matrimonial Script Cross-Site Scripting Vulnerability (CNVD-2018-01240)

Muslim Matrimonial Script is a community matrimonial script for matrimonial websites by PHP Scripts Mall. A cross-site scripting vulnerability exists in PHP Scripts Mall Muslim Matrimonial Script. The vulnerability can be exploited to conduct cross-site scripting attacks via the admin/casteview.p...

Ruby on Rails SQL Injection Vulnerability (CNVD-2018-01349)

Ruby on Rails is a web application development framework written in the Ruby language. A SQL injection vulnerability exists in the 'where' method in Ruby on Rails 5.1.4 and earlier. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands via the 'id' parameter...