CVE-2017-12946

classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in a delete action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by administrators...

Multiple Vulnerabilities in Duxcms Backend

DuxCms is a PHP development, based on HMVC rules for small and medium-sized enterprises, companies, news, personal and other related industries, website content management. Duxcms backend - form - guestbook cross-site scripting and SQL injection vulnerability. The vulnerability due to the system ...

PHP-Bridge Component SQL Injection Vulnerability in Joomla!

Joomla! is an open source, cross-platform content management system developed using PHP and MySQL. A SQL injection vulnerability exists in the id parameter in Joomla! PHP-Bridge, which can be exploited by attackers to access or modify database data...

CVE-2017-11631

dapur/app/appuser/controller/status.php in Fiyo CMS 2.0.7 has SQL injection via the id parameter...

CVE-2017-11631

dapur/app/appuser/controller/status.php in Fiyo CMS 2.0.7 has SQL injection via the id parameter...

CVE-2017-11631: Improper Neutralization of Special Elements used in an SQL Command

dapur/app/appuser/controller/status.php in Fiyo CMS 2.0.7 has SQL injection via the id parameter...

Tilde CMS class.SystemAction.php file SQL injection vulnerability

Tilde CMS is a web content management system CMS. A SQL injection vulnerability exists in the class.SystemAction.php file in Tilde CMS version 1.0.1. A remote attacker can exploit this vulnerability by sending a POST request to /actionphp/action.input.php with the 'id' parameter to execute...

CVE-2015-2798: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2017-6613

Name of the Vulnerable Software and Affected Versions Joomla! Component Contact Form Maker version 1.0.1 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the id parameter. Recommendations For version 1.0.1, avoid using the id parameter in the affecte...

CVE-2017-11324: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Tilde CMS 1.0.1. Due to missing escaping of the backtick character, a SELECT query in class.SystemAction.php is vulnerable to SQL Injection. The vulnerability can be triggered via a POST request to /actionphp/action.input.php with the id parameter...

iWebShop open source mall system id parameters exist SQL injection vulnerability

iWebShop is an open source WEB e-commerce B2B2C platform self-supporting + merchants stationed station-building system based on PHP language + MYSQL database development, using the MVC architecture Yii framework thinking design pattern carefully designed a product. iWebShop open source mall syste...

CVE-2017-11413

Fiyo CMS 2.0.7 has SQL injection in dapur/apps/apparticle/controller/commentstatus.php via $GET'id'...

DEBIAN-CVE-2017-1000032

Cross-Site scripting XSS vulnerabilities in Cacti 0.8.8b allow remote attackers to inject arbitrary web script or HTML via the parentid parameter to tree.php and drpaction parameter to datasources.php...

Ke361 Taoist Mall system GoodsController.class.php parameter id has SQL injection vulnerability

Ke361 is an open source Taobao system. A SQL injection vulnerability exists in the GoodsController.class.php parameter id of the Ke361 Taobao Mall system. Attackers can use to change the vulnerability to obtain database information...

CVE-2017-11198: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in /application/lib/ajax/getimage.php in FineCMS through 2017-07-12 allows remote attackers to inject arbitrary web script or HTML via the folder, id, or name parameter...

SQL Injection Vulnerability in Hanchao B2B2C Multi-User Mall System

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system source code developed in PHP + MySQL. Hanchao B2B2C Multi-User Mall System v2.1.3 version of the Orderid parameter, delorder method SQL injection vulnerability exists due to the system fails to effectively filter the...

SQL Injection Vulnerability in yiifcms Content Management System

yiifcms is a content management system CMS developed on the yii framework. A SQL injection vulnerability exists in the yiifcms content management system due to the system's failure to strictly filter the id and catalogid parameters. An attacker can exploit this vulnerability to obtain sensitive...

Cross site scripting

Cross-site scripting XSS vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the diehtmlinputerror function in lib/htmlvalidate.php...

CVE-2017-10970

Cross-site scripting XSS vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the diehtmlinputerror function in lib/htmlvalidate.php...

CVE-2017-10970: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the diehtmlinputerror function in lib/htmlvalidate.php...