CVE-2017-17578

CVE-2017-17578 affects FS Crowdfunding Script 1.0 (PHP/MySQL). The vulnerability is a SQL injection in the latest_news_details.php script via the id parameter, enabling a remote attacker to inject SQL commands. CVSS vectors indicate high/critical impact with network access and no authentication r...

CVE-2017-17055

Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting XSS attack involving the username-form-id parameter to freeradius.users.php...

pantamusik.com XSS vulnerability

Open Bug Bounty ID: OBB-442008 Description| Value ---|--- Affected Website:| pantamusik.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

CVE-2015-3934

Multiple SQL injection vulnerabilities in Fiyo CMS 2.01.9.1 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to apps/apparticle/controller/rating.php or 2 user parameter to user/login...

CVE-2017-15981

Responsive Newspaper Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

Sql injection

AROX School ERP PHP Script 1.0 allows SQL Injection via the officeadmin/ id parameter...

CVE-2017-15982

Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

CVE-2017-15987

Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter...

CVE-2017-15978

AROX School ERP PHP Script 1.0 allows SQL Injection via the officeadmin/ id parameter...

CVE-2017-15983

MyMagazine Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

CVE-2017-15960

Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php...

Sql injection

iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php...

CVE-2017-15960

Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php...

CVE-2017-15961

iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php...

CVE-2017-15972

SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php senderid parameter, or the /admin Email field, a related issue to CVE-2017-15971...

CVE-2017-15965

The NS Download Shop aka comnsdownloadshop component 2.2.6 for Joomla! allows SQL Injection via the id parameter in an invoice.create action...

CVE-2017-15973

Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/membersview.php...

Sql injection

Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/membersview.php...

CVE-2017-15973

Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/membersview.php...

CVE-2017-15961

iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php...