1047 matches found
SQL Injection Vulnerability in ASK2 Q&A System Backend uid Parameter
ask2 Q&A system is whatsns product community, providing free version of the open source php Q&A system, integration of paid Q&A system, paid voice Q&A system, comes with a super collection of features, rapid station building, powerful seo optimization. ASK2 Q&A system background uid parameters...
CVE-2019-16119
SQL injection in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries.php albumid parameter...
CVE-2018-17393
SQL Injection exists in HealthNode Hospital Management System 1.0 via the id parameter to dashboard/Patient/info.php or dashboard/Patient/patientdetails.php...
CVE-2018-17399
SQL Injection exists in the Jimtawl 2.2.7 component for Joomla! via the id parameter...
CVE-2019-9910
The kingcomposer plugin 2.7.6 for WordPress has wp-admin/admin.php?page=kc-mapper id XSS...
Yeswiki Cercopitheque SQL Injection Vulnerability
Yeswiki Cercopitheque is a Wiki system written in PHP. The system is mainly used to create and manage websites in a collaborative way. A SQL injection vulnerability exists in the 'Bazar' page in Yeswiki Cercopitheque 2018-06-19-1 and earlier versions. A remote attacker can exploit the vulnerabili...
Dotcms cross-site scripting vulnerability (CNVD-2018-26792)
dotCMS is a content management system CMS from the United States dotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A cross-site scripting vulnerability exists in dotCMS 5.0.3 and earlier versions. A remote attacker can leverage t...
DomainMOD cross-site scripting vulnerability (CNVD-2019-07972)
DomainMOD is an open source application for managing your domain names and other Internet assets in a centralized location. A cross-site scripting vulnerability exists in DomainMOD versions 4.11.01 and earlier, which can be exploited by remote attackers to inject arbitrary web script or HTML via...
CVE-2018-18488
In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, SQL Injection exists via the ids parameter...
baijiacms Cross-Site Scripting Vulnerability
baijiacms is a content management system CMS for e-commerce. A cross-site scripting vulnerability exists in the 'id' parameter of the assets/weengine/components/zclip/ZeroClipboard.swf file in version 4 of baijiacms, which can be exploited by a remote attacker to obtain cookies and other sensitiv...
BTITeam XBTIT Cross-Site Scripting Vulnerability
XBTIT is an open source tracking software. A cross-site scripting vulnerability exists in news.php in BTITeam XBTIT 2.5.4. An attacker can exploit this vulnerability via the id parameter to conduct a cross-site scripting attack...
ShopsN open source online store full system AdController file there are SQL injection vulnerabilities
ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd. a full-featured enterprise-class commercial standards in line with the real allow free commercial use of open source online store full network system. ShopsN 2.3.3 official version of the...
CVE-2018-7766
The vulnerability exists within processing of trackgetdata.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the id input parameter...
BearAdmin SQL Injection Vulnerability
BearAdmin is a backend management system based on ThinkPHP5 and AdminLTE. A SQL injection vulnerability exists in BearAdmin version 0.5, which originates from the admin\controller\AdminLog.php page failing to properly construct a MySQL query. A remote attacker can exploit the vulnerability by...
CVE-2018-10283
CliqueMania loja virtual 14 has SQL Injection via the patch/remote.php id parameter in a recomendar action...
The vulnerability in the `track_import_export.php` script of the U.motion builder system allows a perpetrator to execute arbitrary SQL queries against the database.
The vulnerability of the trackimportexport.php script of the U.motion builder system, a system for managing industrial and residential buildings, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL...
CVE-2018-9309
An issue was discovered in zzcms 8.2. It allows SQL injection via the id parameter in a dl/dlsendsms.php request...
SQL Injection Vulnerability in xycms Advertising Design Center Website System
xycms advertising design center website system is to asp + access for the development of advertising company website. A SQL injection vulnerability exists in the xycms Advertising Design Center website system. The vulnerability stems from the program's failure to effectively filter the variable...