PT-2017-14342

Name of the Vulnerable Software and Affected Versions Fake Magazine Cover Script affected versions not specified Description The issue allows SQL Injection via the rate.php value parameter or the content.php id parameter. Recommendations For all affected versions, consider restricting access to t...

PT-2017-14337

Name of the Vulnerable Software and Affected Versions Dynamic News Magazine & Blog CMS version 1.0 Description The issue allows SQL Injection via the id parameter to the "admin/admin process.php" endpoint for form editing. Recommendations For Dynamic News Magazine & Blog CMS version 1.0, avoid...

CVE-2017-15982: Improper Neutralization of Special Elements used in an SQL Command

Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

CVE-2017-15981: Improper Neutralization of Special Elements used in an SQL Command

Responsive Newspaper Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

CVE-2017-15983: Improper Neutralization of Special Elements used in an SQL Command

MyMagazine Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

PT-2017-14338

Name of the Vulnerable Software and Affected Versions MyMagazine Magazine & Blog CMS version 1.0 Description The issue allows SQL Injection via the id parameter to "admin/admin process.php" for form editing. Recommendations For MyMagazine Magazine & Blog CMS version 1.0, avoid using the id...

CVE-2017-15965

The NS Download Shop aka comnsdownloadshop component 2.2.6 for Joomla! allows SQL Injection via the id parameter in an invoice.create action...

CVE-2017-15973

Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/membersview.php...

Sql injection

iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php...

CVE-2017-15972

SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php senderid parameter, or the /admin Email field, a related issue to CVE-2017-15971...

CVE-2017-15973

Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/membersview.php...

CVE-2017-15960

Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php...

CVE-2017-15961

iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php...

CVE-2017-15960

Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php...

Sql injection

Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/membersview.php...

CVE-2017-15961

iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php...

Sql injection

The NS Download Shop aka comnsdownloadshop component 2.2.6 for Joomla! allows SQL Injection via the id parameter in an invoice.create action...

CVE-2017-15960

Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php...

CVE-2017-15965

The NS Download Shop aka comnsdownloadshop component 2.2.6 for Joomla! allows SQL Injection via the id parameter in an invoice.create action...

CVE-2017-15961: Improper Neutralization of Special Elements used in an SQL Command

iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php...