1123 matches found
DynPG 安全漏洞
DynPG is a free open source software for managing web content and modules while focusing on business process automation. A cross-site scripting vulnerability exists in DynPG 4.9.2. A remote attacker can exploit this vulnerability by injecting JavaScript via the "page" parameter...
PHPGurukul Online Book Store SQL注入漏洞
Online BookStore is an online bookstore program. There is a sql injection vulnerability in Online Book Store v1.0. The vulnerability is caused by the id parameter in detail.php not filtering special characters, and an attacker can execute arbitrary SQL statements through this vulnerability...
CVE-2021-22875
Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the setPerPage parameter...
Hgiga MailSherlock SQL注入漏洞
HGiga MailSherlock is an email archiving and auditing system that provides a complete email security solution. HGiga MailSherlock suffers from a SQL injection vulnerability. An attacker can use this vulnerability to inject and execute SQL commands in the URL parameters of a specific cgi page...
CVE-2020-29227
An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file inclusion resulting in code execution...
PT-2020-17111 · Unknown · Car Rental Management System
Name of the Vulnerable Software and Affected Versions: Car Rental Management System version 1.0 Description: An issue was discovered in the Car Rental Management System where an unauthenticated user can perform a file inclusion attack against the "/index.php" file with a partial filename in the...
CVE-2020-8887
Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=login request to index.php aka the server login page...
Sql injection
Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=login request to index.php aka the server login page...
UBUNTU-CVE-2020-10946
Cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the page parameter to service-monitoring/src/index.php. This vulnerability is fixed in versions 1.6.4, 18.10.3, 19.04.3, and 19.0.1 of the Centreon host-monitoring widget; 1.6.4, 18.10.5,...
Waychar enrollment system aj***.php page pa***_ne*** parameter has SQL injection vulnerability
Waychar Enrollment System is a PHP/MYSQL based enrollment system. A SQL injection vulnerability exists in the aj.php page pane parameter of Waychar enrollment system, which can be exploited by an attacker to obtain sensitive information from the database...
PT-2020-6504 · D Link · D-Link Dap-2020
Name of the Vulnerable Software and Affected Versions: D-Link DAP-2020 version 1.01rc001 Description: The issue is related to a stack-based buffer overflow when handling the var:page parameter provided to the "webproc" endpoint. This occurs due to the lack of proper validation of the length of...
SQL injection vulnerability in the b*** parameter of the zzzphp sa***.php page
zzphp is a PHP and MYSQL based CMS, free open source building system. zzzphp sa.php page b parameters exist SQL injection vulnerability, an attacker can exploit the vulnerability to obtain database sensitive information...
SQL injection vulnerability in the ge*** page po*** parameter of the UCLE Intelligent Education Cloud Platform
Mingbo Education Technology Co., Ltd. is a company that provides quality products, services and solutions for smart education in the field of primary and secondary schools K12. There is a SQL injection vulnerability in the ge page po parameter of the UCL Smart Education Cloud Platform, which can ...
SQL Injection Vulnerability in YU***_us*** Parameter of Yunye CMS in***.php Page
Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. Yunye CMS in.php page YUus parameter there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...
CVE-2019-18951
SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files...
SQL injection vulnerability in the pi***.asp page parameter of Enterprise First's website building system ma***.asp
Enterprise First website builder is a free website builder system provided by Enterprise First. SQL injection vulnerability exists in the ma.asp page pi parameter of the Enterprise First website building system, which can be exploited by an attacker to obtain sensitive information from the databa...
S-CMS e-commerce system aj***.php page st*** parameter has SQL injection vulnerability
S-CMS e-commerce system is an e-commerce software. S-CMS e-commerce system aj.php page st parameters exist SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...
CVE-2016-10984
The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter...
