377 matches found
CVE-2017-18614
The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...
CVE-2019-14968
An issue was discovered in imcat 4.9. There is SQL Injection via the index.php order parameter in a mod=faqs action...
CVE-2019-14968
An issue was discovered in imcat 4.9. There is SQL Injection via the index.php order parameter in a mod=faqs action...
Sql injection
An issue was discovered in imcat 4.9. There is SQL Injection via the index.php order parameter in a mod=faqs action...
CVE-2019-14968
An issue was discovered in imcat 4.9. There is SQL Injection via the index.php order parameter in a mod=faqs action...
S-CMS php version e-commerce system v1.5 SQL injection vulnerability in background aj***.php order parameter
Ltd. is mainly engaged in computer software, hardware development and sales, Internet technology development, technical services, network information systems integration, web design, network engineering design, installation, commissioning, maintenance, software outsourcing services. S-CMS php...
CVE-2018-17381
SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filterorderDir or filterorder parameter...
GHSA-98PQ-PMW9-4GPM SQL Injection in sequelize
Affected versions of sequelize are vulnerable to SQL Injection in locations where user input is passed into the limit or order parameters of sequelize query calls, such as findOne or findAll. Recommendation Update to version 3.17.0 or later...
CVE-2018-13792
Multiple SQL injection vulnerabilities in the monitoring feature in the HTTP API in ABBYY FlexiCapture before 12 Release 2 allow an attacker to execute arbitrary SQL commands via the mask, sortOrder, filter, or Order parameter...
Steve Pallen Xain Cross-Site Scripting Vulnerability
Steve Pallen Xain is a library that provides HTML markup for Elixir. A cross-site scripting vulnerability exists in versions of Steve Pallen Xain prior to 0.6.2, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of the 'order' parameter...
Cross site scripting
An XSS issue was discovered in Steve Pallen Xain before 0.6.2 via the order parameter...
CVE-2018-20302
An XSS issue was discovered in Steve Pallen Xain before 0.6.2 via the order parameter...
CVE-2018-20302
An XSS issue was discovered in Steve Pallen Xain before 0.6.2 via the order parameter...
CVE-2018-20302
Steve Pallen Xain is affected by an XSS vulnerability in versions prior to 0.6.2, exploitable via the order parameter. The issue is reported across multiple sources (CVE-2018-20302, related advisories). Remediation: upgrade to Xain 0.6.2 or newer to mitigate.
CVE-2018-20302
An XSS issue was discovered in Steve Pallen Xain before 0.6.2 via the order parameter...
CVE-2018-19925
An issue was discovered in Sales & Company Management System SCMS through 2018-06-06. It has SQL injection via the member/memberorder.php type parameter, related to the Ostate parameter...
CVE-2018-18546
ThinkPHP 3.2.4 has SQL Injection via the order parameter because the Library/Think/Db/Driver.class.php parseOrder function mishandles the key variable...
CVE-2018-18546
ThinkPHP 3.2.4 has SQL Injection via the order parameter because the Library/Think/Db/Driver.class.php parseOrder function mishandles the key variable...