9774 matches found
CVE-2017-14761
In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter...
CVE-2017-14762
In GeniXCMS 1.1.4, an XSS vulnerability exists in /inc/lib/Control/Backend/menus.control.php exploitable via the id parameter. The issue allows reflected/script-injected content in the affected page, as described by CVE-2017-14762. The provided documents do not specify the exact impact scope, exp...
CVE-2017-14762
In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter...
CVE-2017-14762
In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter...
CVE-2017-14761
In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter...
CVE-2017-14761
In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter...
CVE-2017-14762: Improper Neutralization of Input During Web Page Generation
In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter...
PT-2017-13720
Name of the Vulnerable Software and Affected Versions Mojoomla School Management System for WordPress affected versions not specified Description The issue allows SQL Injection via the id parameter. Recommendations At the moment, there is no information about a newer version that contains a fix f...
PT-2017-13724
Name of the Vulnerable Software and Affected Versions Mojoomla WPAMS Apartment Management System for WordPress affected versions not specified Description The issue allows SQL Injection via the id parameter. Recommendations At the moment, there is no information about a newer version that contain...
PT-2017-13719
Name of the Vulnerable Software and Affected Versions Mojoomla SMSmaster Multipurpose SMS Gateway for WordPress affected versions not specified Description The issue allows SQL Injection via the id parameter. Recommendations At the moment, there is no information about a newer version that contai...
CVE-2017-14761: Improper Neutralization of Input During Web Page Generation
In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter...
PT-2017-13675
Name of the Vulnerable Software and Affected Versions GeniXCMS version 1.1.4 Description The issue is related to a Cross-Site Scripting XSS vulnerability. It affects the /inc/lib/backend/menus.control.php endpoint, specifically through the id parameter. This allows for potential XSS attacks...
PT-2017-13721
Name of the Vulnerable Software and Affected Versions Mojoomla WPGYM WordPress Gym Management System affected versions not specified Description The issue allows SQL Injection via the id parameter. Recommendations At the moment, there is no information about a newer version that contains a fix fo...
PT-2017-13723
Name of the Vulnerable Software and Affected Versions Mojoomla Hospital Management System for WordPress affected versions not specified Description The issue allows SQL Injection via the id parameter. Recommendations At the moment, there is no information about a newer version that contains a fix...
PT-2017-13722
Name of the Vulnerable Software and Affected Versions WPCHURCH Church Management System for WordPress affected versions not specified Description The issue allows SQL Injection via the id parameter. Recommendations At the moment, there is no information about a newer version that contains a fix f...
CVE-2015-7670: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in includes/update.php in the Support Ticket System plugin before 1.2.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 user or 2 id parameter...
PT-2017-13268
Name of the Vulnerable Software and Affected Versions Responsive Image Gallery plugin versions prior to 1.2.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the id parameter in an add edit theme task in the "wpdevart gallery themes"...
CVE-2017-1002023: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in wordpress plugin Easy Team Manager v1.3.2, The code does not sanitize id before making it part of an SQL statement in file ./easy-team-manager/inc/easyteammanagerdescedit.php...