PHP Scripts Mall Event Search Script SQL Injection Vulnerability

PHP Scripts Mall Event Search Script is a PHP based online event registration script from PHP Scripts Mall India. The script can be embedded into a website and accept online event bookings from other organizations or companies. A SQL injection vulnerability exists in PHP Scripts Mall Event Search...

PHP Scripts Mall PHP Multivendor Ecommerce SQL Injection Vulnerability

PHP Scripts Mall PHP Multivendor Ecommerce is a set of PHP based ecommerce website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce version 1.0. A remote attacker can inject SQL by sending the 'sid' parameter to the...

FS Grubhub Clone SQL Injection Vulnerability

FS Grubhub Clone is a set of PHP-based scripts for online food ordering websites. A SQL injection vulnerability exists in FS Grubhub Clone version 1.0. A remote attacker can exploit this vulnerability to inject SQL commands...

PHP Scripts Mall Professional Service Script SQL Injection Vulnerability

PHP Scripts Mall Professional Service Script is a set of PHP based professional service website scripts by PHP Scripts Mall India. The script is able to provide users with the required information about professional service providers. A SQL injection vulnerability exists in PHP Scripts Mall...

CVE-2017-17608

Child Care Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17110

Techno Portfolio Management Panel 1.0 allows an attacker to inject SQL commands via a single.php?id= request...

Heimdal denial of service vulnerability

Heimdal is a Kerberos 5 implementation. A security vulnerability exists in Heimdal version 7.1.0. A remote attacker can exploit this vulnerability by sending specially crafted UDP packets to cause a denial of service crash, null pointer backreference, and segmentation error...

Microsoft ASP.NET Core Denial of Service Vulnerability (CNVD-2017-37109)

Microsoft .NET Core is a free open source development platform from Microsoft USA. The platform features multi-language support and cross-platform. A denial of service vulnerability exists in Microsoft .NET Core versions 1.0, 1.1, and 2.0 due to the program failing to properly parse certificate...

SAP HANA Extended Application Services Security Bypass Vulnerability

SAP HANA is a high-performance real-time data analytics platform from SAP, which provides data query functions that allow users to directly query and analyze a large amount of real-time business data.Extended Application Services XS is a development environment for application servers, Web server...

YxtCMF v3.1.0 SQL Injection Vulnerability in Frontend ShitiController.class.php Page

YxtCMF Yi Xue Tang Online Learning System is an online learning platform system developed with thinkphp+bootstrap as the framework. YxtCMF v3.1.0 has a SQL injection vulnerability in the frontend ShitiController.class.php page. An attacker can exploit this vulnerability to obtain sensitive...

MyBuilder Clone SQL Injection Vulnerability

MyBuilder Clone is an e-commerce website building system. A SQL injection vulnerability exists in MyBuilder Clone version 1.0. A remote attacker can exploit this vulnerability by sending the 'subcategory' parameter to the phpsqlsearchgenxml.php file to inject SQL commands...

Unspecified Vulnerability in Apple iOS and macOS Sierra 802.1X

Apple iOS and macOS Sierra are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; macOS Sierra is a specialized operating system developed for Mac computers. 802.1X is one of the Client or Server-based access control and authentication protocol components. A...

E-Sic Software livre CMS 'q' Parameter SQL Injection Vulnerability

E-Sic is a Brazilian electronic system for citizen information. A SQL injection vulnerability exists in E-Sic version 1.0. A remote attacker can exploit the vulnerability by sending the 'q' parameter to the file esiclivre/restrito/inc/lkpcep.php to execute arbitrary SQL commands...

PT-2017-14114 · Abb · Abb Fox515T

Name of the Vulnerable Software and Affected Versions: ABB Fox515T version 1.0 Description: The embedded web server is vulnerable to Local File Inclusion. It accepts a parameter that specifies a file for display or for use as a template. The filename is not validated, allowing an attacker to...

Zyxel NBG6716 ozkerz component command injection vulnerability

The Zyxel NBG6716 is a wireless router product from Hopkin ZyXEL Technologies. ozkerz component is one of the components. A security vulnerability exists in the ozkerz component of the Zyxel NBG6716 V1.00AAKG.9C0 version, which originates from the program's direct use of beginIndex and endIndex i...

LAVA Computer MFG Ether-Serial Link Authentication Bypass Vulnerability

Ether-Serial Link is an Ethernet serial link device from LAVA Computer MFG. An authentication bypass vulnerability exists in LAVA Computer MFG Ether-Serial Link versions 6.01.00/29.03.2007 and earlier, which can be exploited by an attacker with the same IP address to bypass authentication by...

EyesOfNetwork web interface SQL injection vulnerability (CNVD-2017-33830)

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides business process configuration tools, generating pop-up windows when events occur in the active queue, etc. EyesOfNetwork web interface aka eonweb is one of the web interfaces. A SQL injection vulnerability...

Oracle PeopleSoft Enterprise PRTL Interaction Hub Unauthorized Operation Vulnerability (CNVD-2017-28378)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PRTL Interaction Hub is one of the enterprise and Customer Interaction...

CVE-2017-10091

Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control subcomponent: UI Framework. Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-10070

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: Maintenance Folders. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...