705 matches found
CVE-2021-41755
dynamicMarkt = 3.10 is affected by SQL injection in the kat1 parameter of index.php...
CVE-2022-30352
phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "authuser" parameter in index.php script...
CVE-2022-31489
Inout Blockchain AltExchanger 1.2.1 allows index.php/home/about inoutiolanguage cookie SQL injection...
CVE-2022-30776
atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter...
ShopXO 安全漏洞
ShopXO is an open source enterprise-level open source e-commerce system. ShopXO version 2.2.5 and previous versions of a security vulnerability , the vulnerability stems from the app/install/controller/Index.php in the Add function found to contain the system reinstallation vulnerability...
CVE-2022-28521
ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=spsetconfig...
CVE-2022-28521
ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=spsetconfig...
CVE-2021-43478
A vulnerability exists in Hoosk 1.8.0 in /install/index.php, due to a failure to check if config.php already exists in the root directory, which could let a malicious user reinstall the website...
livehelperchat 代码问题漏洞
livehelperchat is available via live helper chat, which provides free live support on the site. livehelperchat versions prior to 3.96 are vulnerable to a code issue stemming from SSRF on index.php/cobrowse/proxycss/. An attacker could exploit this vulnerability to cause the application to execute...
Attendance Management System跨站脚本漏洞
Sourcecodester Student Attendance Management System is an attendance management system used to maintain daily attendance records. A cross-site scripting vulnerability exists in Sourcecodester Student Attendance Management System version 1.0. The vulnerability stems from a lack of data validation...
CVE-2021-43700
An issue was discovered in ApiManager 1.1. there is sql injection vulnerability that can use in /index.php?act=api&tag=8...
gongwalker ApiManager SQL注入漏洞
gongwalker ApiManager is an interface documentation management tool for individual developers of gongwalker. A security vulnerability exists in gongwalker ApiManager 1.1, which can be exploited by attackers via /index.php?act=api&tag=8...
CVE-2020-27467
A Directory Traversal vulnerability exits in Processwire CMS before 2.7.1 via the download parameter to index.php...
CVE-2022-23375
WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php...
CVE-2022-23375
WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php...
CVE-2020-24000
SQL Injection vulnerability in eyoucms cms v1.4.7, allows attackers to execute arbitrary code and disclose sensitive information, via the tid parameter to index.php...
CVE-2020-21649
Myucms v2.2.1 contains a server-side request forgery SSRF in the component \controller\index.php, which can be exploited via the sql method...
MyuCms 代码问题漏洞
MyuCms is a content management system based on ThinkPhp developed specifically for enterprises. myucms has a cross-site request forgery vulnerability in v2.2.1, which stems from a sql method in the product controllerindex.php file that does not correctly determine that the request originates from...
CVE-2021-39433
A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user...