CVE-2017-17570: Improper Neutralization of Special Elements used in an SQL Command

FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php florig or fldest parameter...

PT-2017-14865

Name of the Vulnerable Software and Affected Versions FS Expedia Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain pages. The vulnerable parameters include id in "pages.php" or "content.php", and fl orig or fl dest in...

FS Expedia Clone 1.0 - fl_orig fl_dest id SQL Injection

FS Expedia Clone 1.0 - florig fldest id SQL Injection Exploit Title: FS Expedia Clone 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/expedia-clone/ Demo: http://expedia-clone.demonstration.co.in/ Versio...

dadu.ru XSS vulnerability

Vulnerable URL: http://dadu.ru/www/dadu//site-pages.php?clientid==16"...

Jweb CMS pages.php parameter pageId SQL injection vulnerability

No description provided by source...

Quick CMS 6.1 Cross Site Scripting

FULL DISCLOSURE Product : Quick CMS Exploit Author : Rahul Pratap Singh Version : 6.1 Home page Link : http://opensolution.org/home.html Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 19/Jan/2016 XSS Vulnerability:...

CVE-2011-5310

Directory traversal vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...

CVE-2011-5311

CVE-2011-5311 describes a Cross-site request forgery (CSRF) in Wikipad 1.6.0, where requests that modify pages via the data[text] parameter can hijack an administrator’s authenticated session. Affected component: pages.php. Root cause and detailed exploit path are not elaborated beyond the parame...

PT-2015-3506

Name of the Vulnerable Software and Affected Versions Wikipad version 1.6.0 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the id parameter of the pages.php file. Recommendations For Wikipad version 1.6....

PT-2015-3505

Name of the Vulnerable Software and Affected Versions Wikipad version 1.6.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the id parameter in the pages.php file. Recommendations For Wikipad version 1.6.0, avoid using the ...

CVE-2011-5310: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...

CVE-2011-5309: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2011-5311: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to hijack the authentication of administrators for requests that modify pages via the datatext parameter...

K9 Kreativity Design (pages.php) SQL Injection Vulnerability

No description provided by source. ========================================================== K9 Kreativity Design pages.php SQL Injection Vulnerability ========================================================== + K9 Kreativity Design pages.php SQL Injection Vulnerability + By NewbieCampuz +...

Multi Vendor Mall (pages.php) SQL Injection Vulnerability

No description provided by source. ============================================================ Multi Vendor Mall pages.php SQL Injection Vulnerability ============================================================ + Multi Vendor Mall pages.php SQL Injection Vulnerability + By NewbieCampuz +...

MyBB Plugin Custom Pages 1.0 - Remote SQL Injection Vulnerability

No description provided by source. MyBulletin Board MyBB Plugin Custom Pages 1.0 - SQL Injection Vulnerability found by: LidlosesAuge Greetz to: free-hack.com Vulnerability: Document: pages.php GET-Parameter: page Dork: inurl:pages.php + intext:powered by mybb Example:...

phpMyRealty <= 1.0.9 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. phpMyRealty = 1.0.9 pages.php id Remote SQL Injection Vulnerability Author: !DoktOR! Date found: 27.08.08 Product: phpMyRealty Version: 1.0.7, 1.0.9 Download script: http://rapidshare.com/files/123835319/phpMyRealty.v1.0.7.PHP-rs.rar Vulnerability Class: SQL...

Telmanik CMS Press 1.01b (pages.php, page_name param) - SQL Injection

No description provided by source. x Type: SQL Injection x Vendor: www.telmanik.com x Script Name: Telmanik CMS Press x Script Version: 1.01b x Script DL: http://www.telmanik.com/download/TelmanikCMSPress/1.01beta/telmanikcmspressv1.01beta.zip x Author: Anarchy Angel x Mail : anarchyatdc414dotorg...

CVE-2014-0341

Multiple cross-site scripting XSS vulnerabilities in PivotX before 2.3.9 allow remote authenticated users to inject arbitrary web script or HTML via the title field to 1 templatesinternal/pages.tpl, 2 templatesinternal/home.tpl, or 3 templatesinternal/entries.tpl; 4 an event field to objects.php;...

PT-2014-3572

Name of the Vulnerable Software and Affected Versions PivotX versions prior to 2.3.9 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via specific fields, including the title field to certain template files, an event field, email field, or nickname...