Niushop open source mall system id parameter SQL injection vulnerability

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a PHP open source e-commerce system . NiuShop open source mall system id parameters exist SQL injection vulnerability . As the system fails to...

Niushop open source mall system index method exists SQL injection vulnerabilities

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NIUSHOP open source mall system uid parameter exists SQL injection vulnerability . The vulnerability due t...

SQL Injection Vulnerability in Niushop Goods.php

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NIUSHOP open source mall system goods.php file id parameter SQL injection vulnerability , the program for...

SQL Injection Vulnerability in the cartSettlement Method of ShopSn V2.0 Mall System

ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of open source online store full network system. A SQL injection vulnerability exists in the cartid parameter in the cartSettlement method ...

Xionghai CMS system id parameter exists sql injection vulnerability

XIONGHAI CMS is developed by XIONGHAI can be widely used in personal blogs, personal websites, corporate websites, a set of integrated website management system. XIONGHAI CMS system id parameters exist sql injection vulnerability, the vulnerability due to the failure of the id parameters for...

PT-2017-18914

Name of the Vulnerable Software and Affected Versions Event List plugin version 0.7.8 Description The issue allows an authenticated user to execute arbitrary SQL commands. This is achieved via the id parameter to the "wp-admin/admin.php" endpoint. Recommendations For Event List plugin version...

CVE-2017-9429: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Event List plugin 0.7.8 for WordPress allows an authenticated user to execute arbitrary SQL commands via the id parameter to wp-admin/admin.php...

Xycms edit_article.php page id parameter has SQL injection vulnerability

XYCMS was formerly known as Nanjing XYCMS Enterprise Station Building System, which is a commercial station building system based on ASP development. Xycms editarticle.php page id parameter has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database...

SQL Injection Vulnerability in Flash cms O_id Parameter

Flash Flash cms is Zibo Flash Network Technology Co., Ltd. developed a corporate website system. A SQL injection vulnerability exists in the Oid parameter of the Flash cms /member/memberwuliu.asp page. The vulnerability stems from the program's failure to filter user-submitted data. An attacker c...

SQL Injection Vulnerability in the ID Parameters of the Website Building System of Tianjin General Zhuoye Technology Co.

Tianjin General Zhuoye Technology Co., Ltd. station-building system is a station-building system that provides Tianjin website construction, Tianjin website promotion, network marketing integration services, website security solutions. There is a SQL injection vulnerability in the ID parameter of...

CVE-2016-10331

Directory traversal vulnerability in download.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to read arbitrary files via a full pathname in the id parameter...

PT-2017-7868

Name of the Vulnerable Software and Affected Versions Synology Photo Station versions prior to 6.5.3-3226 Description The issue allows remote attackers to read arbitrary files via a full pathname in the id parameter in the "download.php" file. Recommendations For versions prior to 6.5.3-3226,...

Allen Disk Cross-Site Scripting Vulnerability

Allen Disk is a free, open source cloud-based hard disk product that features encrypted file storage, online preview, file sharing and more. A cross-site scripting vulnerability exists in the 'id' parameter of the downfile.php file in Allen Disk version 1.6. A remote attacker can exploit this...

CVE-2017-8832

Allen Disk 1.6 has XSS in the id parameter to downfile.php...

CVE-2017-8832

Allen Disk 1.6 has a Cross-Site Scripting (XSS) vulnerability in the id parameter of downfile.php. The connected records consistently describe this XSS flaw for Allen Disk 1.6, but none of the provided documents supply details on exploitation methods, affected versions beyond 1.6, specific root c...

PT-2017-18563

Name of the Vulnerable Software and Affected Versions Allen Disk version 1.6 Description The issue concerns a problem where an attacker can exploit the id parameter in the "downfile.php" endpoint to perform a cross-site scripting XSS attack. Recommendations For Allen Disk version 1.6, avoid using...

CVE-2017-8832: Improper Neutralization of Input During Web Page Generation

Allen Disk 1.6 has XSS in the id parameter to downfile.php...

S-CMS enterprise website builder system/wapmember/post.asp page O_id parameter exists SQL injection vulnerability

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. There is a SQL injection vulnerability in the Oid parameter of the /wapmember/post.asp page of the S-CMS enterprise website builder system. As the program fails to filter the data submitted by users, it...

S-CMS member_newsinfo.asp page N_id parameter has SQL injection vulnerability

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. A SQL injection vulnerability exists in the Nid parameter of the /member/membernewsinfo.asp page of the S-CMS enterprise website builder system. Because the program fails to effectively filter the data...

SQL injection vulnerability in viewChannerParamXml.jsp file id parameter of Enterprise Customer Management Platform (ECMP)

Enterprise letter is the use of java development of a special tailored to the enterprise customer value-added SMS business, enterprise customers in the use of computers at the same time can be completed with the production of office combined with the internal SMS communication. SQL injection...