PT-2017-14489

Name of the Vulnerable Software and Affected Versions NetGain Systems Enterprise Manager version 7.2.730 build 1034 Description This issue allows remote attackers to overwrite arbitrary files on vulnerable installations. Although authentication is required to exploit this issue, the existing...

CVE-2017-17567: Improper Neutralization of Special Elements used in an SQL Command

Scubez Posty Readymade Classifieds has SQL Injection via the admin/useractivatesubmit.php ID parameter...

CVE-2017-17578: Improper Neutralization of Special Elements used in an SQL Command

FS Crowdfunding Script 1.0 has SQL Injection via the latestnewsdetails.php id parameter...

CVE-2017-17615: Improper Neutralization of Special Elements used in an SQL Command

Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter...

PT-2017-14911

Name of the Vulnerable Software and Affected Versions Facebook Clone Script version 1.0 Description The issue is related to SQL Injection, which can be exploited via the id parameter in the "friend-profile.php" endpoint. Recommendations For Facebook Clone Script version 1.0, avoid using the id...

PT-2017-14870

Name of the Vulnerable Software and Affected Versions FS Groupon Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the id parameter in the "item details.php" or "vendor details.php" API endpoints. Recommendations For FS Groupon Clone version 1.0, avoid usi...

CVE-2017-17575: Improper Neutralization of Special Elements used in an SQL Command

FS Groupon Clone 1.0 has SQL Injection via the itemdetails.php id parameter or the vendordetails.php id parameter...

PT-2017-14889

Name of the Vulnerable Software and Affected Versions DomainSale PHP Script version 1.0 Description The issue is related to SQL Injection, which occurs via the id parameter in the "domain.php" endpoint. Recommendations For DomainSale PHP Script version 1.0, avoid using the id parameter in the...

PT-2017-14873

Name of the Vulnerable Software and Affected Versions FS Crowdfunding Script version 1.0 Description The issue is related to SQL Injection, which occurs via the id parameter in the "latest news details.php" API endpoint. Recommendations For FS Crowdfunding Script version 1.0, consider restricting...

PT-2017-14716

Name of the Vulnerable Software and Affected Versions Techno Portfolio Management Panel version 1.0 Description The issue allows an attacker to inject SQL commands via a "single.php?id=" request. This could potentially lead to unauthorized access or manipulation of data. Recommendations For Techn...

CVE-2017-17055

Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting XSS attack involving the username-form-id parameter to freeradius.users.php...

pantamusik.com XSS vulnerability

Open Bug Bounty ID: OBB-442008 Description| Value ---|--- Affected Website:| pantamusik.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

CVE-2015-3934

Multiple SQL injection vulnerabilities in Fiyo CMS 2.01.9.1 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to apps/apparticle/controller/rating.php or 2 user parameter to user/login...

CVE-2017-15981

Responsive Newspaper Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

Sql injection

AROX School ERP PHP Script 1.0 allows SQL Injection via the officeadmin/ id parameter...

CVE-2017-15978

AROX School ERP PHP Script 1.0 allows SQL Injection via the officeadmin/ id parameter...

CVE-2017-15983

MyMagazine Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

CVE-2017-15987

Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter...

CVE-2017-15982

Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

PT-2017-14332

Name of the Vulnerable Software and Affected Versions AROX School ERP PHP Script version 1.0 Description The issue allows SQL Injection via the id parameter in the office admin endpoint. Recommendations For AROX School ERP PHP Script version 1.0, consider restricting access to the office admin...