1047 matches found
CVE-2018-5971
SQL Injection exists in the MediaLibrary Free 4.0.12 component for Joomla! via the id parameter or the mid array parameter...
CVE-2018-5981
SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...
CVE-2018-6605
SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request...
CP Event Calendar SQL Injection Vulnerability in Joomla!
Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. CP Event Calendar is one of the event calendar plugin . A SQL injection vulnerability exists in Joomla! CP Event Calendar version 3.0.1. A remote...
Bus Booking Script SQL Injection Vulnerability
Bus Booking Script is an online bus booking management system based on PHP and MySQL. A SQL injection vulnerability exists in Bus Booking Script. A remote attacker can obtain sensitive data e.g., current database user, mysql user by sending the 'spid' parameter to the admin/viewseatseller.php fil...
Synology Photo Station Cross-Site Scripting Vulnerability (CNVD-2018-01382)
Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. A cross-site scripting vulnerability exists in the PixlrEditorHandler.php file in Synology Photo Station versions prior to 6.8.0-3456. A remote attacker can exploit the vulnerability to inject...
CVE-2017-17779
Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter...
CVE-2017-17779
Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter...
CVE-2017-17605
Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter...
CVE-2017-17600
Basic B2B Script 2.0.8 has SQL Injection via the productdetails.php id parameter...
Techno Portfolio Management Panel 'id' SQL Injection Vulnerability
Techno is a portfolio management administration panel. A SQL injection vulnerability exists in Techno Portfolio Management Panel 'id'. An attacker can exploit this vulnerability to inject SQL commands via a single.php?id= request...
iProject Management System SQL Injection Vulnerability
iProject Management System is a project management software for SMEs. A SQL injection vulnerability exists in iProject Management System version 1.0. The vulnerability can be exploited by remote attackers to inject SQL commands by sending the 'ID' parameter to the index.php file...
Basic B2B Script SQL Injection Vulnerability
Basic B2B Script is a B2B e-commerce website system. A SQL injection vulnerability exists in Basic B2B Script. The vulnerability can be exploited by remote attackers to inject SQL commands by sending 'pid' or 'id' parameters to the productview1.php file...
CVE-2017-14507
Multiple SQL injection vulnerabilities in the Content Timeline plugin 4.4.2 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 timeline parameter in contenttimelineclass.php; or the id parameter to 2 pages/contenttimelineedit.php or 3 pages/contenttimelineindex.php...
WordPress Mojoomla Hospital Management System SQL Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on PHP and MySQL servers.Mojoomla Hospital Management System is one of the hospital management systems. A SQL injection vulnerability exists in...
WordPress Mojoomla School Management System SQL Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on PHP and MySQL servers.Mojoomla School Management System is one of the school management systems. A SQL injection vulnerability exists in WordPre...
WordPress Responsive Image Gallery Plugin SQL Injection Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL server set up a personal blog site.Responsive Image Gallery plugin is one of the image management plugin. A SQL injection vulnerability exists in WordPre...
DaisyThemes WordPress Easy Team Manager SQL Injection Vulnerability
DaisyThemes WordPress Easy Team Manager is a team management plugin for WordPress developed by DaisyThemes UK. A SQL injection vulnerability exists in DaisyThemes WordPress Easy Team Manager version 1.3.2, which stems from a vulnerability in . /easy-team-manager/inc/easyteammanagerdescedit.php fi...
Xiamen Dragon Pulse website building system products.asp page sid parameter SQL injection vulnerability
Xiamen Dragon Pulse Network is a website building system. Xiamen Dragon Pulse Network website builder system products.asp page sid parameter exists SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...