SQL Injection Vulnerability in OAID Parameter of Haitian OA System/Documents/OA_WordDocDisplay.asp Page

Haitian OA network office system is suitable for enterprises and institutions of the general-purpose network office software, the system adopts the leading B / S browser / server mode of operation, so that the network office is not subject to geographical restrictions. A SQL injection vulnerabili...

Persian Car CMS SQL Injection Vulnerability

Persian Car CMS is a content management system. Persian Car CMS fails to properly handle the 'catid' parameter in URLs, allowing remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain database data...

Sql injection

SQL injection vulnerability in the EQ Event Calendar component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to eqfullevent...

Sql injection

SQL injection vulnerability in mod1/index.php in the Akronymmanager sbakronymmanager extension before 7.0.0 for TYPO3 allows remote authenticated users with permission to maintain acronyms to execute arbitrary SQL commands via the id parameter...

SQL injection vulnerability in the id parameter in Ticketmaster ERP web-based ticketing system/Parmset/sms_mb_edit.aspx?id=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...

SQL injection vulnerability in the id parameter of Ticketmaster ERP web-based ticketing system/flight/Html.aspx?id=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...

SQL injection vulnerability in the id parameter in Ticketmaster ERP web-based ticketing system/Sales/meb_his.aspx?id=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...

SQL injection vulnerability in the id parameter in Ticketmaster ERP web-based ticketing system/flight/refund_update.aspx?id=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...

SQL injection vulnerability in the id parameter of Ticketmaster ERP web-based ticketing system/Other/Edit.aspx?id=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...

SQL injection vulnerability in the id parameter in Ticketmaster ERP web-based ticketing system/Visa/gjqz_add.aspx?id=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...

CVE-2012-3243

Cross-site scripting XSS vulnerability in the SEOgento plugin for Magento allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in the SEOgento plugin for Magento allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2012-3243

The CVE-2012-3243 entry concerns a Cross-site Scripting (XSS) vulnerability in the SEOgento plugin for Magento, where an attacker can inject arbitrary script/HTML through the id parameter. The affected component is the SEOgento plugin for Magento; the root cause is an XSS flaw that enables script...

CVE-2012-3243

Cross-site scripting XSS vulnerability in the SEOgento plugin for Magento allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

WordPress Shareaholic plugin cross-site scripting vulnerability

WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on PHP and MySQL servers.Shareaholic plugin is a famous plugin of WordPress for social discovery and sharing platform. A cross-site scripting...

SQL Injection Vulnerability in Safi OA System

Safe OA system is an office system developed by ASP.NET, and customers involved in medicine, finance, schools, administration and many other units. There is a SQL injection vulnerability in Safi OA system, because the ID parameter of the /ArchiveSend/GetArchiveFlowInfo.aspx page fails to filter t...

.SWF Files Injecting Malicious iFrames on WordPress, Joomla Sites

Researchers have seen an uptick in Adobe Flash .SWF files being used to trigger malicious iFrames across websites. Several hundred WordPress and Joomla websites have been swept up in the campaign, first observed by researchers at the firm Sucuri last November. “Though it’s uncertain how many...

Joomla Contact Form Maker 1.0.1 SQL Injection

+Title: Joomla Contact Form Maker v1.0.1 Component - SQL injection vulnerability +Author: TUNISIAN CYBER +Date: 29/03/2015 +Vendor: http://extensions.joomla.org/extensions/extension/contacts-and-feedback/contact-forms/contact-form-maker +Type:WebApp +Risk:High +Overview: Contact Form Maker v1.0.1...

ProjectSend SQL Injection Vulnerability

ProjectSend formerly known as cFTP is a suite of self-hosted applications based on PHP and MySQL. A SQL injection vulnerability exists in the client-edit.php script in ProjectSend version r561. Since the users-edit.php script fails to adequately filter the 'id' parameter. A remote attacker can...

CVE-2015-2564

ProjectSend (formerly cFTP) SQL Injection (CVE-2015-2564) affects client-edit.php in r561. An authenticated remote attacker can exploit the vulnerability via the id parameter to users-edit.php to execute arbitrary SQL commands. Root cause: inadequate input filtering for id leading to SQL injectio...