[SECURITY] Fedora 26 Update: libextractor-1.6-2.fc26

libextractor is a simple library for keyword extraction. libextractor does not support all formats but supports a simple plugging mechanism such that you can quickly add extractors for additional formats, even without recompiling libextractor. libextractor typically ships with a dozen...

[SECURITY] Fedora 27 Update: libextractor-1.6-2.fc27

libextractor is a simple library for keyword extraction. libextractor does not support all formats but supports a simple plugging mechanism such that you can quickly add extractors for additional formats, even without recompiling libextractor. libextractor typically ships with a dozen...

CVE-2017-17642

Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...

CVE-2017-17642

Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...

CVE-2017-17623

Opensource Classified Ads Script 3.2 has SQL Injection via the advanceresult.php keyword parameter...

Sql injection

Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...

CVE-2017-17623

Opensource Classified Ads Script 3.2 has SQL Injection via the advanceresult.php keyword parameter...

CVE-2017-17623

Opensource Classified Ads Script 3.2 is affected by a SQL Injection via the keyword parameter in advance_result.php. Multiple sources (NVD/CVE listings and CNVD/CVE records) confirm an injectable vulnerability in this version, with CVSS scores indicating HIGH/CRITICAL severity (NVD CVSS2: 7.5 HIG...

CVE-2017-17642

Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...

PT-2017-14919

Name of the Vulnerable Software and Affected Versions Opensource Classified Ads Script version 3.2 Description The issue is related to SQL Injection, which occurs via the keyword parameter in the "advance result.php" endpoint. Recommendations For Opensource Classified Ads Script version 3.2,...

CVE-2017-17623: Improper Neutralization of Special Elements used in an SQL Command

Opensource Classified Ads Script 3.2 has SQL Injection via the advanceresult.php keyword parameter...

CVE-2017-17642: Improper Neutralization of Special Elements used in an SQL Command

Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...

PT-2017-14938

Name of the Vulnerable Software and Affected Versions Basic Job Site Script version 2.0.5 Description The issue concerns a SQL Injection flaw. It can be exploited via the keyword parameter to the "/job" API endpoint. Recommendations For Basic Job Site Script version 2.0.5, consider restricting...

Pink Diary App has information leakage vulnerability

Powder Diary App is a life multi-functional recording tool App. Pink Diary APP has information leakage vulnerability, attackers can obtain sensitive information by searching keywords...

CVE-2017-16955

SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows authenticated users to execute arbitrary SQL commands via the "keyword" parameter to /wp-admin/options-general.php?page=inlinks/inlinks.php...

CVE-2017-16955

SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows authenticated users to execute arbitrary SQL commands via the "keyword" parameter to /wp-admin/options-general.php?page=inlinks/inlinks.php...

PT-2017-14657

Name of the Vulnerable Software and Affected Versions InLinks plugin versions through 1.1 for WordPress Description The issue allows authenticated users to execute arbitrary SQL commands. This is achieved via the "keyword" parameter to the "/wp-admin/options-general.php?page=inlinks/inlinks.php"...

CVE-2017-16955: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows authenticated users to execute arbitrary SQL commands via the "keyword" parameter to /wp-admin/options-general.php?page=inlinks/inlinks.php...

WordPress In Link 1.0 SQL Injection Vulnerability

WordPress In Link plugin version 1.0 suffers from a remote SQL injection vulnerability. Vulnerability Type: SQL injection is POST parameter "keyword" Affected plugin: --------------------------------------- In Link Version: 1.0 Requires WordPress Version: 2.8 or higher Compatible up to: 2.8 URL:...

Vonage VDV-23 Cross-Site Scripting Vulnerability

The Vonage VDV-23 115 is a routing repeater from Vonage USA. A cross-site scripting vulnerability exists in the Vonage VDV-23 115 version 3.2.11-0.9.40. A remote attacker can exploit this vulnerability by sending the NewKeyword or NewDomain field to /goform/RgParentalBasic to inject arbitrary web...