CVE-2013-2651

Multiple cross-site scripting XSS vulnerabilities in BoltWire 3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 "p" or 2 content parameter to index.php...

Sql injection

SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the "post" parameter to index.php...

CVE-2013-6243

SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the "post" parameter to index.php...

CVE-2013-6243

SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the "post" parameter to index.php...

WordPress Landing Pages Plugin <=1.2.3 - SQL Injection

Because of this vulnerability, the attackers can execute arbitrary SQL commands via the "post" parameter to index.php. Solution Update the plugin...

CVE-2013-2651: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in BoltWire 3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 "p" or 2 content parameter to index.php...

PT-2013-5978

Name of the Vulnerable Software and Affected Versions Landing Pages plugin versions 1.2.3 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the post parameter to the "index.php" endpoint. Recommendations For Landing Pages...

CVE-2013-6243: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the "post" parameter to index.php...

PT-2013-3868

Name of the Vulnerable Software and Affected Versions BoltWire versions 3.5 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the content parameter or the p parameter to the "index.php" endpoint. Recommendations For BoltWire...

CVE-2013-5091: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in CalendarCommon.php in vTiger CRM 5.4.0 and possibly earlier allows remote authenticated users to execute arbitrary SQL commands via the onlyforuser parameter in an index action to index.php. NOTE: this issue might be a duplicate of CVE-2011-4559...

PT-2013-5358

Name of the Vulnerable Software and Affected Versions vTiger CRM versions 5.4.0 and earlier Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved by exploiting the onlyforuser parameter in an index action to index.php. Recommendations For...

CVE-2013-5979

The CVE-2013-5979 issue affects Spring Signage Xibo 1.2.x (pre-1.2.3) and 1.4.x (pre-1.4.2). A directory traversal flaw allows remote attackers to read arbitrary files by supplying a .. in the p parameter to index.php. Impact: potential exposure of sensitive server files. Root cause: insufficient...

CVE-2013-5979: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and 1.4.x before 1.4.2 allows remote attackers to read arbitrary files via a .. dot dot in the p parameter to index.php...

Wapkul Beta 3 SQL Injection Vulnerability

Exploit for php platform in category web applications / \ / | / \ /000000 | 00 | /000000 | 00 \00/ / \ / \ / \ 00 \ / / \ / \ 00 \00/ / \ / | 00 \ 000000 |/000000 |000000 |0000000 |000000 0000 | 000000 | 00 \ /000000 |/0000000/ 000000 | / 00 |00 | 00/ / 00 |00 | 00 |00 | 00 | 00 | / 00 | 000000...

Directory traversal

Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the file parameter to index.php/admin/translationManager...

CVE-2013-5693

Cross-site scripting XSS vulnerability in X2Engine X2CRM before 3.5 allows remote attackers to inject arbitrary web script or HTML via the model parameter to index.php/admin/editor...

CVE-2013-5692

Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the file parameter to index.php/admin/translationManager...

CVE-2013-5693

CVE-2013-5693 affects X2Engine X2CRM

CVE-2013-5693

Cross-site scripting XSS vulnerability in X2Engine X2CRM before 3.5 allows remote attackers to inject arbitrary web script or HTML via the model parameter to index.php/admin/editor...

PT-2013-5728

Name of the Vulnerable Software and Affected Versions X2Engine X2CRM versions prior to 3.5 Description A directory traversal issue allows remote authenticated administrators to include and execute arbitrary local files. This is achieved by using a .. dot dot in the file parameter to the...