CVE-2020-18878

Directory Traversal in Skycaiji v1.3 allows remote attackers to obtain sensitive information via the component 'index.php?m=admin&c=Tool&a=log&file=D%3A%5CphpStudy%5CWWW%5Cindex.php'...

CVE-2020-18878

Directory Traversal in Skycaiji v1.3 allows remote attackers to obtain sensitive information via the component 'index.php?m=admin&c=Tool&a=log&file=D%3A%5CphpStudy%5CWWW%5Cindex.php'...

Sql injection

SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'...

CVE-2020-18877

SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'...

CVE-2020-18878: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal in Skycaiji v1.3 allows remote attackers to obtain sensitive information via the component 'index.php?m=admin&c=Tool&a=log&file=D%3A%5CphpStudy%5CWWW%5Cindex.php'...

PT-2021-10247

Name of the Vulnerable Software and Affected Versions: Skycaiji version 1.3 Description: The issue allows remote attackers to obtain sensitive information. This is achieved through a Directory Traversal attack. The "index.php" component is vulnerable, specifically when the parameters...

PT-2021-10246

Name of the Vulnerable Software and Affected Versions: Wuzhi CMS version 4.1.0 Description: The issue allows remote attackers to obtain sensitive information via the flag parameter in the component "/coreframe/app/order/admin/index.php". This is a SQL Injection issue that can be exploited by...

CVE-2020-18877: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'...

Exploit for SQL Injection in Os4Ed Opensis

OPENSIS 8.0 SQL INJECTION VULNERABILITY CVE-2021-39377 A SQL...

CVE-2020-18164

SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...

CVE-2020-18164

SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...

CVE-2020-18164

SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...

CVE-2020-22937

A remote code execution RCE in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via writing malicious code to the install file...

Exploit for Cross-site Scripting in Online_Student_Rate_System_Project Online_Student_Rate_System

CVE-2021-39408 A reflected Cross Site Scripting XSS vulnerab...

CVE-2020-22937: Improper Control of Generation of Code

A remote code execution RCE in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via writing malicious code to the install file...

PT-2021-10144

Name of the Vulnerable Software and Affected Versions: tp-shop versions 2.x through 3.x Description: A SQL Injection issue exists via the "/index.php/home/api/shop" API endpoint, specifically through the fBill parameter. Recommendations: For tp-shop versions 2.x through 3.x, avoid using the fBill...

TPshop SQL注入漏洞

TPshop is a new retail smart e-commerce ecosystem. TPshop security vulnerability, the vulnerability stems from the index.php home api store fBill parameter may lead to SQL injection vulnerability...

CVE-2020-18164: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...

CVE-2021-38758

Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.php...

CVE-2021-38758

Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.php...