Yeswiki Cercopitheque SQL Injection Vulnerability

Yeswiki Cercopitheque is a Wiki system written in PHP. The system is mainly used to create and manage websites in a collaborative way. A SQL injection vulnerability exists in the 'Bazar' page in Yeswiki Cercopitheque 2018-06-19-1 and earlier versions. A remote attacker can exploit the vulnerabili...

Dotcms cross-site scripting vulnerability (CNVD-2018-26792)

dotCMS is a content management system CMS from the United States dotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A cross-site scripting vulnerability exists in dotCMS 5.0.3 and earlier versions. A remote attacker can leverage t...

DomainMOD cross-site scripting vulnerability (CNVD-2019-07972)

DomainMOD is an open source application for managing your domain names and other Internet assets in a centralized location. A cross-site scripting vulnerability exists in DomainMOD versions 4.11.01 and earlier, which can be exploited by remote attackers to inject arbitrary web script or HTML via...

CVE-2018-18488

In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, SQL Injection exists via the ids parameter...

baijiacms Cross-Site Scripting Vulnerability

baijiacms is a content management system CMS for e-commerce. A cross-site scripting vulnerability exists in the 'id' parameter of the assets/weengine/components/zclip/ZeroClipboard.swf file in version 4 of baijiacms, which can be exploited by a remote attacker to obtain cookies and other sensitiv...

BTITeam XBTIT Cross-Site Scripting Vulnerability

XBTIT is an open source tracking software. A cross-site scripting vulnerability exists in news.php in BTITeam XBTIT 2.5.4. An attacker can exploit this vulnerability via the id parameter to conduct a cross-site scripting attack...

ShopsN open source online store full system AdController file there are SQL injection vulnerabilities

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd. a full-featured enterprise-class commercial standards in line with the real allow free commercial use of open source online store full network system. ShopsN 2.3.3 official version of the...

CVE-2018-7766

The vulnerability exists within processing of trackgetdata.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the id input parameter...

BearAdmin SQL Injection Vulnerability

BearAdmin is a backend management system based on ThinkPHP5 and AdminLTE. A SQL injection vulnerability exists in BearAdmin version 0.5, which originates from the admin\controller\AdminLog.php page failing to properly construct a MySQL query. A remote attacker can exploit the vulnerability by...

CVE-2018-10283

CliqueMania loja virtual 14 has SQL Injection via the patch/remote.php id parameter in a recomendar action...

The vulnerability in the `track_import_export.php` script of the U.motion builder system allows a perpetrator to execute arbitrary SQL queries against the database.

The vulnerability of the trackimportexport.php script of the U.motion builder system, a system for managing industrial and residential buildings, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL...

CVE-2018-9309

An issue was discovered in zzcms 8.2. It allows SQL injection via the id parameter in a dl/dlsendsms.php request...

SQL Injection Vulnerability in xycms Advertising Design Center Website System

xycms advertising design center website system is to asp + access for the development of advertising company website. A SQL injection vulnerability exists in the xycms Advertising Design Center website system. The vulnerability stems from the program's failure to effectively filter the variable...

CVE-2018-6368

SQL Injection exists in the JomEstate PRO through 3.7 component for Joomla! via the id parameter in a task=detailed action...

CVE-2018-5989

SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber action, a related issue to CVE-2011-5099...

CVE-2018-5971

SQL Injection exists in the MediaLibrary Free 4.0.12 component for Joomla! via the id parameter or the mid array parameter...

CVE-2018-5981

SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...

CVE-2018-6605

SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request...

CP Event Calendar SQL Injection Vulnerability in Joomla!

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. CP Event Calendar is one of the event calendar plugin . A SQL injection vulnerability exists in Joomla! CP Event Calendar version 3.0.1. A remote...

Bus Booking Script SQL Injection Vulnerability

Bus Booking Script is an online bus booking management system based on PHP and MySQL. A SQL injection vulnerability exists in Bus Booking Script. A remote attacker can obtain sensitive data e.g., current database user, mysql user by sending the 'spid' parameter to the admin/viewseatseller.php fil...