1042 matches found
PT-2021-11457 · Ibm · Ibm Tivoli Storage Manager
Name of the Vulnerable Software and Affected Versions: IBM Tivoli Storage Manager Version 5 Release 2 Description: The issue concerns a stack buffer overflow that can be exploited through the id parameter when used in interactive mode. This exploitation is limited by a maximum number of character...
VulnCheck KEV: CVE-2018-6605
SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request...
Mainway FireEye EX SQL注入漏洞
Mainway FireEye EX is an all-in-one platform for enterprise security from Mainway, a China-based company. the FireEye® Central Management Platforms CM Series are a set of management platforms that consolidate the management, reporting, and data sharing of FireEye products into a single, easily...
Ovidentia SQL注入漏洞
Ovidentia is an open source content management system and multi-user collaboration platform . It is written in PHP , and uses MYSQL as its database . It can be simple and easy to integrate a content can be published on the WEB environment or a portal component of the company , organization ,...
PHPGurukul Online Book Store SQL注入漏洞
Online BookStore is an online bookstore program. There is a sql injection vulnerability in Online Book Store v1.0. The vulnerability is caused by the id parameter in detail.php not filtering special characters, and an attacker can execute arbitrary SQL statements through this vulnerability...
Ipeak Ibexwebcms SQL Injection Vulnerability
Ipeak Ibexwebcms is a website builder for booking housing from Ipeak Norway. A SQL injection vulnerability exists in ipeak Infosystems ibexwebCMS IPeakCMS 3.5, which originates from an unvalidated id parameter on the /cms/print.php page...
MISP 跨站脚本漏洞
MISP is an open source software solution for collecting, storing, distributing and sharing cybersecurity metrics and threats related to cybersecurity event analysis and malware analysis. A cross-site scripting vulnerability exists in the template element index view in MISP 2.4.134. The...
Sectona Spectra Information Disclosure Vulnerability
Sectona Spectra is a privilege management system for enterprise device access from US-based sectona. The platform supports the consolidation of accounts in the cloud with local accounts to centralize enterprise device management and improve access security. An information disclosure vulnerability...
openSIS SQL Injection Vulnerability (CNVD-2020-52047)
openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the id parameter in CoursePeriodModal.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...
CVE-2020-13483
The Web Application Firewall in Bitrix24 through 20.0.0 allows XSS via the itemsITEMSID parameter to the components/bitrix/mobileapp.list/ajax.php/ URI...
Component prayercenter 'id' SQL Injection Vulnerability in Joomla!
Joomla! is an open source content management system CMS that provides RSS feeds, site search, etc. PrayerCenter is used in one of the prayer sharing components. A SQL injection vulnerability exists in the prayercenter 'id' component of Joomla! An attacker can exploit the vulnerability to obtain...
SQL Injection Vulnerability in Waychar Enrollment System aj***.php Page id*** Parameter
Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar enrollment system aj.php page id parameter exists SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...
CVE-2019-20223
In Support Incident Tracker SiT! 3.67, the id parameter is affected by XSS on all endpoints that use this parameter, a related issue to CVE-2012-2235...
eyecomms eyeCMS Insecure Direct Object Reference (IDOR) Vulnerability
eyecomms eyeCMS is a content management system CMS from eyecomms Oman. A security vulnerability exists in eyecomms eyeCMS 2019-10-15 and earlier versions. An attacker can exploit the vulnerability by modifying the 'id' parameter to modify personal information name, email, phone, resume and other...
OpenEMR Cross-Site Scripting Vulnerability (CNVD-2019-43375)
OpenEMR is a medical practice management software that also supports electronic medical records EMR. A reflected cross-site scripting vulnerability exists in interface/forms/eyemag/view.php in OpenEMR. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via the id...
SQL Injection Vulnerability in ASK2 Q&A System Backend uid Parameter
ask2 Q&A system is whatsns product community, providing free version of the open source php Q&A system, integration of paid Q&A system, paid voice Q&A system, comes with a super collection of features, rapid station building, powerful seo optimization. ASK2 Q&A system background uid parameters...
CVE-2019-16119
SQL injection in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries.php albumid parameter...
CVE-2018-17393
SQL Injection exists in HealthNode Hospital Management System 1.0 via the id parameter to dashboard/Patient/info.php or dashboard/Patient/patientdetails.php...