PHPCMS version 9.1.5 to 9.6.3 SQL Injection Vulnerability in Member Module me***_mo***.php

PHPCMS uses PHP5+MYSQL as the technical basis for development.V9 uses OOP object-oriented approach to build the basic operational framework. PHPCMS 9.1.5 to 9.6.3 version of the membership module memo.php SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitiv...

SQL Injection Vulnerability in the New Member Module mo**** Parameters of 120 Emergency Command Center Web Service System

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A SQL injection vulnerability exists in the mo parameter of the new membership module of the 120 Emergency Command...

CVE-2018-10235

POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\admin\Setting.php 'index' function because an attacker can control the value of $cache'setting''ucssocfg' in diy\module\member\models\Membermodel.php and write this code into the...

WordPress add-edit-delete-listing-for-member-module SQL Injection Vulnerability

WordPress add-edit-delete-listing-for-member-module is a WordPress-specific plugin for adding, editing and deleting operations on member listings. A SQL injection vulnerability exists in WordPress add-edit-delete-listing-for-member-module version 1.0, which stems from the program failing to filte...

CVE-2017-1002025: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin add-edit-delete-listing-for-member-module v1.0, The plugin author does not sanitize user supplied input via $act before passing it into an SQL statement...

PT-2017-11014

Name of the Vulnerable Software and Affected Versions add-edit-delete-listing-for-member-module version 1.0 Description The issue arises from the plugin author's failure to sanitize user-supplied input via the $act variable before passing it into an SQL statement, potentially leading to SQL...

PHPCMS 'phpcms\modules\member\index.php 'the presence of any of the password reset vulnerability

No description provided by source...

PHPCMS 'phpcms\modules\member\index.php ' Arbitrary Password Reset Vulnerability

PHPCMS is a website management software. The software adopts modular development and supports a variety of classification methods, using it can easily realize the design, development and maintenance of personalized websites. PHPCMS 'phpcms\modules\member\index.php ' has an arbitrary password rese...

xercms \XerCMS\Modules\member\index.php parameters$_FILES SQL injection

sql injection in D:\wamp\www\XerCMS\Modules\member\index. in php upfiles function public function upfiles setformat'json'; $config = ini'member/group/'. X::$G'group'; ifempty$config exit'Access Denied'; else if$config'upload'0 == 0 error'uploadgrouplimit'; else if$config'upload'1 != 0 &&...

XDCMS system\modules\member\index.php SQL注入漏洞

No description provided by source...

XerCMS 20150528 /XerCMS/Modules/member/index.php SQL注入

No description provided by source...

91736cms cookie injection vulnerability-vulnerability warning-the black bar safety net

Re-read under 9 1 7 3 6 before that getip vulnerability has been patch on. 漏洞 文件 :system/modules/member/index.php public function edit ifempty$COOKIE'memberuser'||empty$COOKIE'memberuserid' showmsgC"adminnotexist","index. php? m=member&f=login"; $userid=$COOKIE'memberuserid';...