Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ViMbAdmin 3.0.15 allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 transport parameter to domain/add; the 3 name parameter to mailbox/add/did/; the 4 goto parameter to alias/add/did/; or the 5 captchatext...

SQL Injection Vulnerability in Eview GPS Tracking Platform System name Parameter

Eview GPS Tracking Platform System is an online tracking system from Eview. A SQL injection vulnerability exists in the name parameter of the Eview GPS Tracking Platform System, which can be exploited by attackers to obtain sensitive database information using commonly used SQL injection tools...

CVE-2017-9026

Stack buffer overflow in vshttpd aka ioos in HooToo Trip Mate 6 TM6 firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted fname parameter of a GET request...

ourphp OP_Addname parameter has sql injection vulnerability

OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. The ourphp OPAddname parameter suffers from a sql injection vulnerability, which can be exploited to obtain sensitive data due to a lack of filtering of the parameter...

Uc365 website category navigation system adver_name parameter exists sql injection vulnerability

Uc365 website classification and navigation system is a cross-platform open source software, based on PHP + MYSQL development and construction of open source website classification and catalog management system. Uke365 website category navigation system advername parameter there is a sql injectio...

CVE-2016-2104

Multiple cross-site scripting XSS vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via 1 the label parameter to admin/BunchDetail.do; 2 the packagename, 3 searchsubscribedchannels, or 4 channelfilter parameter to software/packages/NameOverview.d...

Philips In.Sight B120/37 Cross-Site Scripting Vulnerability

The Philips In.Sight B120/37 is a video monitoring device for infants from Philips Netherlands. A cross-site scripting vulnerability exists in the Philips In.Sight B120/37. Sight B120/37 can be exploited by a remote attacker to inject arbitrary web script or HTML via the name parameter...

imdbphp cross-site scripting vulnerability

imdbphp is a PHP library for retrieving movie and TV information from IMDb. A cross-site scripting vulnerability exists in imdbphp version 5.1.1, which stems from the imdbphp-master/demo/search.php URL failing to adequately filter the name parameter, and can be exploited by remote attackers to...

Joomla! Extra Search Component SQL Injection Vulnerability

Joomla! is a fairly well-known content management system in foreign countries. Extra Search is used in Joomla category management search system components. Extra Search is a component of Joomla that is used to manage category searches. An SQL injection vulnerability exists in the ESTABLENAME...

CVE-2016-8855

Cross-Site Scripting XSS in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience Platform 8.1 rev. 160519 8.1 Update-3 allows remote attacks via the Name or Description parameter. This is fixed in 8.2 Update-2...

CVE-2016-8855

Cross-Site Scripting XSS in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience Platform 8.1 rev. 160519 8.1 Update-3 allows remote attacks via the Name or Description parameter. This is fixed in 8.2 Update-2...

Mini CMS 1.1 - name Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Mini CMS v1.1 - SQL Injection Google Dork: N/A Date: 07.03.2017 Vendor Homepage: http://www.icloudcenter.com/ Software : http://www.icloudcenter.com/minicms.htm Demo: http://www.icloudcenter.net/demos/minicms/ Version: 1.1 Tested on:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Umbraco before 7.4.0 allow remote attackers to inject arbitrary web script or HTML via the name parameter to 1 the media page, 2 the developer data edit page, or 3 the form page...

SQL Injection Vulnerability in 'name' Parameter of Single Point CRM System

Single point CRM system is a single point of technology development , based on the GPLv3 agreement issued for small and medium-sized management activities , to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies , fixed...

CVE-2014-9916

Multiple cross-site scripting XSS vulnerabilities in Bilboplanet 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 tribename or 2 tags parameter in a tribes page request to user/ or the 3 userid or 4 fullname parameter to signup.php...

SQL Injection Vulnerability in Ocean CMS v_name Parameter

Ocean CMS is an open source website builder. A SQL injection vulnerability exists in the adminajax.php page of Ocean CMS 6.46 utf-8 official version. The lack of filtering of the 'vname' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...

Multi-meter (DuomiCms) film and television management system v_name parameters exist SQL injection vulnerability

Duomi DuomiCms film and television management system is a set of specialized video on demand system. A SQL injection vulnerability exists in DuomiCms. The lack of filtering of the 'vname' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...

CVE-2016-10043

An issue was discovered in Radisys MRF Web Panel SWMS 9.0.1. The MSMMACRONAME POST parameter in /swms/ms.cgi was discovered to be vulnerable to OS command injection attacks. It is possible to use the pipe character | to inject arbitrary OS commands and retrieve the output in the application's...

SQL Injection Vulnerability in Background Management System of Zhongyi Design Studio

Zhongyi Design Studio Backend Management System is a website building system. The loginName parameter of the CEE Design Studio backend management system has a SQL injection vulnerability parameter that allows attackers to exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in OA System of Tianling Network Technology Co.

Tianling Network Technology Co., Ltd. has developed a business process software tool - myApps Rapid Development Platform, which provides customers with solutions for business process management consulting, planning, design, and training. A SQL injection vulnerability exists in the OA system of...