SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the selectFields parameter in the index function in Auth.php. Remediation There is no fixed version for funadmin/funadmin. References - GitHub Issue - Vulnerable Code...

PT-2024-15600 · Taokeyun · Taokeyun

Name of the Vulnerable Software and Affected Versions: Taokeyun versions up to 1.0.5 Description: A critical issue was found in the HTTP POST Request Handler component, specifically affecting the function index of the file application/index/controller/app/Task.php. The manipulation of the cid...

SUSE CVE-2007-6600

PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for 1 VACUUM and 2 ANALYZE operations within index functions, and supports 3 SET ROLE and 4 SET SESSION AUTHORIZATION within inde...

SUSE CVE-2019-14535

A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted WMV file...

SUSE CVE-2021-20224

An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum function in MagickCore/quantum-export.c. Function calls to GetPixelIndex could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file, this could lead t...

TuziCMS SQL注入漏洞

TuziCMS Rabbit CMS is a PHP and MySQL based enterprise website content management system CMS. A SQL injection vulnerability exists in TuziCMS version 2.0.6, which stems from a problem with the function index of the file appmanage controllerarticlecontroller.class.php in the component article...

PT-2023-16106 · Tuzicms · Tuzicms

Name of the Vulnerable Software and Affected Versions: TuziCMS version 2.0.6 Description: A critical issue has been found in the Article Module of TuziCMS, specifically affecting the index function of the ArticleController.class.php file. The manipulation of the id argument leads to SQL injection...

Halcyon 安全漏洞

Halcyon is a decentralized open source digital currency by John Doering's personal developer. A security vulnerability exists in ghostlander Halcyon, which originates in the function CBlock::AddToBlockIndex in the src/main.cpp file of the component Block Verification, and can be exploited by an...

PT-2023-12404 · Unknown · Ghostlander Halcyon

Name of the Vulnerable Software and Affected Versions: ghostlander Halcyon versions prior to 1.1.1.0-hal Description: A critical vulnerability has been found in ghostlander Halcyon, affecting the function CBlock::AddToBlockIndex of the file src/main.cpp in the component Block Verification. This...

CVE-2022-31393

Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the Index function in app/admin/c/PluginsController.php...

CVE-2022-31393

Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the Index function in app/admin/c/PluginsController.php...

PT-2022-20728

Name of the Vulnerable Software and Affected Versions Jizhicms version 2.2.5 Description A Server-Side Request Forgery SSRF issue was found in the Index function of the PluginsController.php file, located in app/admin/c/. This allows for potential exploitation. Recommendations For Jizhicms versio...

CVE-2020-18449

Cross Site Scripting XSS vulnerability exists in UKCMS v1.1.10 via data in the index function in Single.php...

CVE-2020-18449

Cross Site Scripting XSS vulnerability exists in UKCMS v1.1.10 via data in the index function in Single.php...

CVE-2020-18449

Cross Site Scripting XSS vulnerability exists in UKCMS v1.1.10 via data in the index function in Single.php...

UKCMS 跨站脚本漏洞

Lingji Network Technology UKcms is a PHP-based content management system CMS from China's Lingji Network Technology Company. A cross-site scripting vulnerability exists in UKCMS v1.1.10, which originates from the index function in Single.php...

CVE-2020-18449: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in UKCMS v1.1.10 via data in the index function in Single.php...

PT-2021-10174

Name of the Vulnerable Software and Affected Versions: UKCMS version 1.1.10 Description: A Cross Site Scripting XSS issue exists in the index function in Single.php, allowing for potential exploitation via data input. This could lead to malicious script execution on the client-side...

Privilege Escalation

PostgreSQL is vulnerable to privilege escalation. PostgreSQL improperly protected session-local state during the execution of an index function by a database superuser during the database maintenance operations. An authenticated database user could use this flaw to elevate their privileges via...

POSCMS 'index' function arbitrary code execution vulnerability

POSCMS PhpOpenSourceCMS is a PHP and MySQL based, open source, cross-platform web content management system CMS. A security vulnerability exists in POSCMS version 3.2.10. An attacker can exploit the vulnerability by writing code to the api/ucsso/config.php file with the help of the 'index' functi...