WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress Event Espresso Core plugin has a security vulnerability, version 4.10.6.p and below allows...

Xuchang Yongcheng Network Technology Co., Ltd. website building system pi*** page fl*** parameters exist SQL injection vulnerability

Xuchang Yongcheng Network Technology Co., Ltd. is a company dedicated to Internet development, micro letter application development, enterprise Internet promotion. Xuchang Yongcheng Network Technology Co., Ltd. building system pi page fl parameters exist SQL injection vulnerability, attackers can...

NiuShop B2C Single Merchant Mall System SQL Injection Vulnerability in at***.php Parameters on Front-end wa***.php Page

NiuShop B2C single merchant mall system is a PHP open source e-commerce system designed and developed completely independently by Shanxi NiuKu Information Technology Co. NiuShop B2C single merchant mall system front wa.php page at parameters there is a SQL injection vulnerability, an attacker can...

SQL injection vulnerability in the ad***.php page ti***, em***, un***, co*** parameters of the website building system of Huizhou Zhongxing Internet Technology Co.

Zhongxing Internet technology station building company is a Huizhou professional network marketing system service providers, focusing on website construction and SEO optimization of a reasonable combination. Huizhou City Zhongxing Internet Technology Co., Ltd. station building system ad.php page...

CVE-2018-18800

The Tubigan "Welcome to our Resort" 1.0 software allows SQL Injection via index.php?p=accomodation&q=SQL, index.php?p=rooms&q=SQL, or admin/login.php...

Event Manager SQL Injection Vulnerability

Event Manager is a PHP-based event management script . A SQL injection vulnerability exists in Event Manager version 1.0. A remote attacker can inject SQL commands by sending the 'id' parameter to the event.php file or the 'slug' parameter to the page.php file...

TPshop 2.0 Backend SQL Injection Vulnerability in Multiple Different Page Parameters

TPshop open source mall system Thinkphp shop for short , is a set of Shenzhen Soleil Networks Ltd. developed a set of multi- merchant model of the mall system . TPshop 2.0 background parameters of a number of different pages mobile, id and orderby the existence of SQL injection leaks , allowing...

Huawei FusionServer Product Command Injection Vulnerability

Huawei FusionServer RH2288 V3 is a server product from Huawei, China. A security vulnerability exists in the Huawei FusionServer product that allows remote attackers to submit a special request to change parameters in the login page and inject commands...

WordPress Plugin Spider Facebook Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports personal blogging sites on PHP and MySQL servers.Spider Facebook is one of the plug-ins that can integrate Facebook into a website. A cross-site scripting vulnerability exists in...

CVE-2014-0374

Unspecified vulnerability in the Oracle Portal component in Oracle Fusion Middleware 11.1.1.6 allows remote attackers to affect integrity via unknown vectors related to Page Parameters and Events...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Portal component in Oracle Fusion Middleware 11.1.1.6 allows remote attackers to affect integrity via unknown vectors related to Page Parameters and Events...

CVE-2014-0374

Unspecified vulnerability in the Oracle Portal component in Oracle Fusion Middleware 11.1.1.6 allows remote attackers to affect integrity via unknown vectors related to Page Parameters and Events...

DEBIAN-CVE-2011-3598

Multiple cross-site scripting XSS vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 a web page title, related to classes/Misc.php; or the 2 returnurl or 3 returndesc parameter to display.php...

Bulletlink Newspaper Template Software 0day blind defect and repair-vulnerability warning-the black bar safety net

Bulletlink Newspaper Template Software targetform. asp 0day Blind SQL-Injection Author: easypwn Official website: www.bulletlink.com Test platform: Windows 2 0 0 0, Windows 2 0 0 3, Windows 2 0 0 8. Microsoft SQL Server Test: http://www.badguest.cn /targetform. asp? pform=DeleteMember'SQLi Analog...

PT-2011-18: Cross-Site Scripting in Arbor Peakflow X

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in Arbor Peakflow X. XSS-vulnerable parameters are found on several web pages. The following parameters are vulnerable due to insufficient character escaping: a. /explore/entityinfo/ modestate...

oracle10g-xss.txt

XSS with default page parameter in Oracle Portal 10g Discovered By: Phạm Đức Hải Pham Duc Hai Email: duchaikhtn at gmail dot com YIM : kikicoco1985vn Website: http://blog.ajaxviet.com ------------------------- Description: When programmers code with Oracle Portal, they may use page parameters...

CVE-2006-4822

Multiple cross-site scripting XSS vulnerabilities in index.php in eMuSOFT emuCMS 0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 query or 2 page parameters...

CVE-2006-3247

Multiple cross-site scripting XSS vulnerabilities in show.php in GL-SH Deaf Forum 6.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 page, and 3 action parameters. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2006-1114

Multiple directory traversal vulnerabilities in Loudblog before 0.42 allow remote attackers to read or include arbitrary files via a .. dot dot and trailing %00 NULL byte in the 1 template and 2 page parameters in a index.php, and the 3 language parameter in b inc/backendsettings.php...