705 matches found
CVE-2018-8957
CoverCMS v1.1.6 has XSS via the fourth input box to index.php, related to admina/mconfigs.inc.php...
CVE-2018-8957
CoverCMS v1.1.6 has XSS via the fourth input box to index.php, related to admina/mconfigs.inc.php...
Configuration file write vulnerability in ZZCMS version 8.2
zzcms is a free website builder developed in asp language. There is a configuration file writing vulnerability in the index.php file of zzcms version 8.2, which can be exploited by an attacker to write some configuration information into the configuration file to gain server privileges...
CVE-2017-14535
trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php...
CVE-2017-14536
trixbox 2.8.0.4 has XSS via the PATHINFO to /maint/index.php or /user/includes/language/langChooser.php...
SQL Injection Vulnerability in Five Fingers CMS v4.1.0 index.php Page
Five Fingers CMS is a high-performance open source content management system that supports LNAMP architecture. Five Fingers CMS v4.1.0 index.php page SQL injection vulnerability. Allow attackers to exploit the vulnerability to obtain sensitive database information...
CVE-2018-5988
SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobilepreview.php or index.php...
CentOS Web Panel Cross-Site Scripting Vulnerability (CNVD-2018-03251)
CentOS Web Panel is a CentOS Lnuix system administration panel. A cross-site scripting vulnerability exists in CentOS Web Panel 0.9.8.12 and earlier versions. A remote attacker can exploit this vulnerability by injecting script code into a client browser via the 'module' value of the index.php fi...
CentOS Web Panel Cross-Site Scripting Vulnerability
CentOS Web Panel is a CentOS Lnuix system administration panel. A cross-site scripting vulnerability exists in the index.php file in CentOS Web Panel 0.9.8.12 and earlier versions. A remote attacker can exploit this vulnerability by sending the 'id' parameter to the phpinieditor module or the...
Code Execution Vulnerability in ECShop 3.0
ECShop is a B2C independent online store system, suitable for enterprises and individuals to quickly build a personalized online store. The system is based on PHP language and MYSQL database structure development of cross-platform open source program. A code execution vulnerability exists in the...
PT-2018-17093 · Joomla · Com Adagency
Name of the Vulnerable Software and Affected Versions: com adagency plugin version 6.0.9 for Joomla! Description: The issue allows SQL injection via the advertiser status and status select parameters to "index.php". This can potentially lead to unauthorized access to sensitive data...
Biometric Shift Employee Management System Cross-Site Scripting Vulnerability (CNVD-2018-01397)
Biometric Shift Employee Management System is an employee management system. A cross-site scripting vulnerability exists in Biometric Shift Employee Management System. The vulnerability can be exploited via the amount parameter in the index.php?user=additiondeduction request...
CVE-2017-17991
Biometric Shift Employee Management System has XSS via the expensename parameter in an index.php?user=expenses request...
UBUNTU-CVE-2017-17900
SQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the socid parameter...
PT-2017-15085 · Dolibarr · Dolibarr Erp/Crm
Name of the Vulnerable Software and Affected Versions: Dolibarr ERP/CRM version 6.0.4 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the socid parameter in the 'fourn/index.php' file. Recommendations: For Dolibarr ERP/CRM version 6.0.4,...
WSTSHOP open source version controller\Index.php file reload vulnerability
WSTSHOP open source version is a php language based on the development of B2C open source online store system . WSTSHOP open source version controller\Index.php file reload vulnerability . Allow attackers to exploit the vulnerability reload connection to a malicious external database , etc...
Multiple cross-site scripting vulnerabilities in LabWiki
LabWiki is a meme plugin. Multiple cross-site scripting vulnerabilities exist in LabWiki 1.1 and earlier versions. A remote attacker can exploit this vulnerability by sending the 'from' parameter to the index.php file or the 'pageno' parameter to the recentchanges.php file to inject arbitrary web...
Creative Management System Lite SQL Injection Vulnerability
Creative Management System CMS Lite is a web content management system with features such as menu design, site backup and site calendar. A SQL injection vulnerability exists in CMS Lite version 1.4. A remote attacker can exploit the vulnerability by sending the 'S' parameter to the index.php file...
Reflected Cross-Site Scripting Vulnerability in Axublog go/index.php Page
Axublog is a PHP personal blog system. A reflective cross-site scripting vulnerability exists in the Axublog go/index.php page. An attacker can construct XSS statements and perform pop-up box operations to obtain user cookies and other information...